tomcat-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Reynir Hubner <rey...@hugsmidjan.is>
Subject Re: SSL on tomcat + jk2 + apache2 + RedHat
Date Fri, 11 Nov 2005 10:30:07 GMT
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On that page
 www.apachetomcat.com/tomcat-ssl-5-unix.

They do not install the certificate into apache2, only tomcat5.

If you want this kind of setup to work, you must shut down apache and
have tomcat as a standalone.

hope it helps
- -reynir





Gangaa D wrote:
> Dear,
> I have done SSL on apache2+jk2+tomcat2+RedHat using
> www.apachetomcat.com/tomcat-ssl-5-unix. 
> 
> So when we visit to https ie mark as "This CA Root
> certificate is not trusted because it is not in the
> Trusted Root Certification Authorities store."
> 
> So How do I get Trusted Root Certification
> Authorities?
> 
> --- Reynir Hubner <reynir@hugsmidjan.is> wrote:
> 
> 
> hi,
> 
> yes, if you think about it, if you put your ssl key
> in apache, it will
> be used to secure the comunication between
> apache(server) and the
> client(user). Apache will then decript the message
> and forward it via
> ajp into tomcat. If you want to put ssl on those
> comunications too, it's
> a little more complex, and all you would be doing is
> adding security on
> communications between two server applications
> running on the same
> machine (is it worth it ?).
> 
> Of course you can innstall your certificate into
> tomcat, but if you are
> using apache to front the tomcat, the reason to do
> so is hard to find.
> 
> hope it helps
> -reynir
> 
> 
> 
> 
> 
> Gangaa D wrote:
> 
>>Dear Reynir Hubner,
>>Thank you reply our msg.
> 
>>We have configured jk2 for apache2+tomcat5.
>>So I mean jk2 does not provide SSL. Is this
> 
> correct?
> 
> 
> 
> 
>>__________________________________ 
>>Yahoo! Mail - PC Magazine Editors' Choice 2005 
>>http://mail.yahoo.com
> 
> 
> 
>> ---------------------------------------------------------------------
> 
>>To unsubscribe, e-mail:
> 
> users-unsubscribe@tomcat.apache.org
> 
>>For additional commands, e-mail:
> 
> users-help@tomcat.apache.org
> 
> 

> ---------------------------------------------------------------------

To unsubscribe, e-mail:
users-unsubscribe@tomcat.apache.org
For additional commands, e-mail:
users-help@tomcat.apache.org








> __________________________________ 
> Yahoo! Mail - PC Magazine Editors' Choice 2005 
> http://mail.yahoo.com

> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
> For additional commands, e-mail: users-help@tomcat.apache.org


-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.5 (MingW32)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

iD8DBQFDdHKv19KgIQihNwgRAt90AJ9opGZCksy3/ThGs7QHpNa7P7WHpwCZAWtL
M8COEVDQec2W1AKwUpt/ih8=
=n97b
-----END PGP SIGNATURE-----

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org


Mime
View raw message