Configure localhost SSL certificate and security setting in Apache tomcat 9

Need following setting in my Apache tomcat 9.

1. Localhost SSL Certificate

a) Session cookie –HTTP only –Enable/Disable

b) Options method- Enable/Disable

c) HTTP Header Vulnerabilities

i. X Frame Options Response heads-Incl

ii. X-Xss Protection header-define

iii. X-Content-Type-Option Header-Set Protection

d) Version of software should not be disclosed

e) All ports should be closed except SSL