Mailing-List: contact tomcat-user-help@jakarta.apache.org; run by ezmlm
Precedence: bulk
Reply-To: "Tomcat Users List" <tomcat-user@jakarta.apache.org>
content-class: urn:content-classes:message
MIME-Version: 1.0
Content-Type: text/plain;
	charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
Subject: RE: New idea - Enable Tomcat for SSL?
Date: Thu, 19 Aug 2004 10:52:45 -0400
Message-ID: <9C5166762F311146951505C6790A9CF80229BEF6@US-VS1.corp.mpi.com>
Thread-Topic: New idea - Enable Tomcat for SSL?
Thread-Index: AcSF+47gTpjRolb3TIa2RpiWEFOBdAAAGlGg
From: "Shapira, Yoav" <Yoav.Shapira@mpi.com>
To: "Tomcat Users List" <tomcat-user@jakarta.apache.org>


H=
i,
http://jakarta.apache.org/tomcat/tomcat-5.0-doc/ssl-howto.html

And, of course,
http://jakarta.apache.org/tomcat/faq/connectors.html#integrate which
should have saved you considerable time and effort.

Yoav Shapira
Millennium Research Informatics


>-----Original Message-----
>From: ohaya [mailto:ohaya@cox.net]
>Sent: Thursday, August 19, 2004 10:47 AM
>To: tomcat-user@jakarta.apache.org
>Subject: New idea - Enable Tomcat for SSL?
>
>Hi,
>
>With the problems that I've posted about, trying to run
>Apache+Tomcat+mod_jk/jk2/proxy and not being able to retrieve the PKI=

>client certificate information in JSPs, I'm now wondering if the best=

>way to do this might be to just forget about Apache, and just run
Tomcat
>by itself.
>
>I've seen some info that SEEMS to indicate that it's possible to
>configure Tomcat as a standalone webserver+container that supports bo=
th
>client and server SSL authentication, i.e., no Apache, no mod_xxx, et=
c.
>
>Can anyone confirm that this is true?  Also, if this is true, does
>anyone know if I'll then be able to access the client certificate
>information from my JSPs?
>
>If anyone can point to some detailed instructions or HOWTOs on
>configuring Tomcat this way, I'd really appreciate it.  This would be=

>for the latest Tomcat (5.0.27?).
>
>Even in production, traffic on the server for my project is going to =
be
>very limited, so I'm thinking that this might be the easiest option, =
if
>it can work, and if it allows me to access the info in client certs
from
>JSP.
>
>Thanks,
>Jim
>
>---------------------------------------------------------------------=

>To unsubscribe, e-mail: tomcat-user-unsubscribe@jakarta.apache.org
>For additional commands, e-mail: tomcat-user-help@jakarta.apache.org


This e-mail, including any attachments, is a confidential business com=
munication, and may contain information that is confidential, propriet=
ary and/or privileged.  This e-mail is intended only for the individua=
l(s) to whom it is addressed, and may not be saved, copied, printed, d=
isclosed or used by anyone else.  If you are not the(an) intended reci=
pient, please immediately delete this e-mail from your computer system=
 and notify the sender.  Thank you.


---------------------------------------------------------------------
To unsubscribe, e-mail: tomcat-user-unsubscribe@jakarta.apache.org
For additional commands, e-mail: tomcat-user-help@jakarta.apache.org