If there is absence of securityDomain attribute on the connector setting in the server.xml, the JBossSocketFactory is throwing a NPE (which is masked by the Tomcat JSSESocketFactory implementation that throws a plain IOException).

An evidence of this issue is the: http://jira.jboss.com/jira/browse/JBAS-3390