Return-Path: Delivered-To: apmail-jakarta-tomcat-user-archive@apache.org Received: (qmail 51137 invoked from network); 9 Jan 2002 13:05:44 -0000 Received: from unknown (HELO nagoya.betaversion.org) (192.18.49.131) by daedalus.apache.org with SMTP; 9 Jan 2002 13:05:44 -0000 Received: (qmail 20473 invoked by uid 97); 9 Jan 2002 13:05:10 -0000 Delivered-To: qmlist-jakarta-archive-tomcat-user@jakarta.apache.org Received: (qmail 20457 invoked by uid 97); 9 Jan 2002 13:05:09 -0000 Mailing-List: contact tomcat-user-help@jakarta.apache.org; run by ezmlm Precedence: bulk List-Unsubscribe: List-Subscribe: List-Help: List-Post: List-Id: "Tomcat Users List" Reply-To: "Tomcat Users List" Delivered-To: mailing list tomcat-user@jakarta.apache.org Received: (qmail 20446 invoked from network); 9 Jan 2002 13:05:09 -0000 Message-ID: <0B9A57FF1D57D411B47500D0B73E5CC10594F2DF@dickens.bri.hp.com> From: "ANDERSON-STUDENT,IAN (HP-UnitedKingdom,ex2)" To: "'tomcat-user@jakarta.apache.org'" Subject: SSL between two instances of tomcat Date: Wed, 9 Jan 2002 13:05:02 -0000 MIME-Version: 1.0 X-Mailer: Internet Mail Service (5.5.2653.19) Content-Type: text/plain; charset="ISO-8859-1" X-Spam-Rating: daedalus.apache.org 1.6.2 0/1000/N X-Spam-Rating: daedalus.apache.org 1.6.2 0/1000/N Hello, I am trying to set up a secure connection between two instances of tomcat. I need to ensure that the "back" instance will only take connections from the "front" instance. This needs to be done over a SSL. So far I have created a separate certificate for each instance and exported the public part of it to the other instance. I have also set a separate keystore for each instance and modified the server.xml file accordingly. What I would like to know is how do I tell the back tomcat to authenticate the server its passing data to (the front tomcat). I've tried to use client authentication but this simply prompts the user to submit a certificate. I'm guessing it's a setting in a security file somewhere but I've yet to find it! Thanks Ian Anderson -- To unsubscribe: For additional commands: Troubles with the list: