tomcat-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From jean-frederic clere <jfcl...@gmail.com>
Subject Re: svn commit: r557664 - /tomcat/tc6.0.x/trunk/java/org/apache/catalina/valves/SSLValve.java
Date Fri, 20 Jul 2007 06:33:26 GMT
Bill Barker wrote:
>  
> 
>> -----Original Message-----
>> From: jfclere@apache.org [mailto:jfclere@apache.org] 
>> Sent: Thursday, July 19, 2007 8:52 AM
>> To: tomcat-dev@jakarta.apache.org
>> Subject: svn commit: r557664 - 
>> /tomcat/tc6.0.x/trunk/java/org/apache/catalina/valves/SSLValve.java
>>
>> Author: jfclere
>> Date: Thu Jul 19 08:51:50 2007
>> New Revision: 557664
>>
>> URL: http://svn.apache.org/viewvc?view=rev&rev=557664
>> Log:
>> This Valve is to extra the SSL informations from additional headers
>> When using Apache httpd as proxy they are added by 
>> mod_headers and the following directives:
>> RequestHeader set SSL_CLIENT_CERT "%{SSL_CLIENT_CERT}s"
>> RequestHeader set SSL_CIPHER "%{SSL_CIPHER}s"
>> RequestHeader set SSL_SESSION_ID "%{SSL_SESSION_ID}s"
>> RequestHeader set SSL_CIPHER_USEKEYSIZE "%{SSL_CIPHER_USEKEYSIZE}s"
>>
> 
> Out of curiosity, why not just use AJP/1.3?

One possible use is for example to use https between httpd and TC so 
that the connection can be encrypted.

Cheers

Jean-Frederic

> 
> 
> 
> This message is intended only for the use of the person(s) listed above as the intended
recipient(s), and may contain information that is PRIVILEGED and CONFIDENTIAL.  If you are
not an intended recipient, you may not read, copy, or distribute this message or any attachment.
If you received this communication in error, please notify us immediately by e-mail and then
delete all copies of this message and any attachments.
> 
> In addition you should be aware that ordinary (unencrypted) e-mail sent through the Internet
is not secure. Do not send confidential or sensitive information, such as social security
numbers, account numbers, personal identification numbers and passwords, to us via ordinary
(unencrypted) e-mail.
> 
> 
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
> For additional commands, e-mail: dev-help@tomcat.apache.org
> 
> 


---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org


Mime
View raw message