Mailing-List: contact users-help@tomcat.apache.org; run by ezmlm
Precedence: bulk
Reply-To: "Tomcat Users List" <users@tomcat.apache.org>
Received-SPF: pass (asf.osuosl.org: domain of alexandre.akoulov@citigroup.com
 designates 199.67.179.104 as permitted sender)
content-class: urn:content-classes:message
MIME-Version: 1.0
Content-Type: text/plain;
	charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
Subject: RE: Encrypting ajp13 traffic
Date: Tue, 14 Feb 2006 14:45:55 +1100
Message-ID: <1F78B75C252B574FBC551990AE8A836704A46BF4@exsymb02.aus.nsroot.net>
Thread-Topic: Encrypting ajp13 traffic
Thread-Index: AcYw4xK16nlFeYbdS8eN4je63apo+wANWWzw
From: "Akoulov, Alexandre" <alexandre.akoulov@citigroup.com>
To: "Tomcat Users List" <users@tomcat.apache.org>

Yes,  i've got similar setup .

We might end up setting up ssh tunnelling as well.


Kind regards,

Sasha.=20

-----Original Message-----
From: David Smith [mailto:dns4@cornell.edu]
Sent: Tuesday, 14 February 2006 8:18 AM
To: Tomcat Users List
Subject: Re: Encrypting ajp13 traffic


While I can't speak for the O.P., I have had need for this myself once=20
upon a time.=20

Consider a setup where the content has to be secured via SSL and=20
communication to/from the tomcat is over untrusted infrastructure  SSL=20
can't be proxied, so there is a need for the AJP/13 communication to be=20
encrypted.  My solution at the time was to setup a SSH tunnel between=20
the two systems.

It would be nice to have some form of encryption optionally available.

Food for thought.

 -- David

Mark Thomas wrote:
> Akoulov, Alexandre wrote:
>  =20
>> I am wondering if there is a way encrypt the traffic between apache =
and tomcat when they talk to each other on ajp13.=20
>>    =20
> Why do you want to do this? What requirement are you trying to meet /
> security threat are you trying to mitigate?
>
> Mark
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
> For additional commands, e-mail: users-help@tomcat.apache.org
>
>  =20


--=20
David Smith
Network Operations Supervisor
Department of Entomology
Cornell University
2132 Comstock Hall
Ithaca, NY 14853
Phone: (607) 255-9571
Fax: (607) 255-0940


---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org


---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org