I am using JBoss as application server. I would like to use its Tomcat web container as a web server located on the DMZ, having it communicate with the EJB container residing on the internal network. I would like further to purchase SSL certificate to install on the Jboss?s web container. Where can I find information on the best way to do it ? both splitting the application server to web and EJB container residing on different physical boxes, as well as creating CSRs?