guacamole-user mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Nick Couchman <vn...@apache.org>
Subject Re: SSL
Date Wed, 16 Jan 2019 00:23:28 GMT
On Tue, Jan 15, 2019 at 17:54 sciUser <shulbert@securitycentric.net> wrote:

> I looked at the other topics about SSL and they where not to the point.
>
> If I want to run SSL https://guachere/guacamole do I install it on the
> nginx
> or tomcat?
>

Technically you can install SSL/TLS in either place.  It's generally done
on Nginx (or httpd) because you're likely also trying to get Tomcat proxied
to the standard HTTPS port (443), which, until very recent Linux kernels,
would require running Tomcat (read: Java) under the root account (=bad).
There are a few other ways to accomplish that, but proxying Tomcat behind
either httpd or Nginx with SSL/TLS is very widely practiced.

-Nick

Mime
View raw message