CAS with apache and tomcat

[me]

Hi,

I'm currently developing a application with an cas integration. 
Everything works great with
a tomcat-only installation. That means I've got a tomcat with 3 virtual 
hosts (cas.xyz.com,
www.xyz.com and admin.xyz.com). The last 2 virtual hosts can 
successfully authorize against cas.

But when I'm going live I've got a diffrent setup. The tomcat is on the 
same server as the apache webserver.
The apache is working with ProxyPass to the ajp-port of the tomcat.
Where do I have to configure SSL? Is it only on the webserver or do I 
have to configure it also on the tomcat?
What about the certificate for the jvm which of them has to be in the store?
Can I convert an openssl key to an java-key? Do you now of any tutorial 
doing that setup?

Thanks for your help in advice.

Marc