Tomcat

Terminating SSL at the webserver or load balancer

If you want the tomcat let know that he is behind another Instance that terminates the SSL and tomcat should put https:// in the links, just add scheme="https" and proxyPort="443" to the non SSL Connector definition like this:

<Connector port="8080" protocol="HTTP/1.1"
               server="Apache"
               connectionTimeout="20000"
               scheme="https"
               proxyPort="443"
               />