tomcat-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Mark Thomas <ma...@apache.org>
Subject Re: SSL issues with Tomcat - OutOfMemory
Date Tue, 28 Apr 2009 21:35:12 GMT
Chris Stewart wrote:
> Tomcat 6.0.14.
Think about upgrading as there are security issues in this version.

>  Windows 2003 Server.  2GB of memory on system.  Java
> 1.6.0_06.
Again, security issues - think about upgrading

> <Connector port="80" protocol="HTTP/1.1" connectionTimeout="20000"
> redirectPort="443" />
connectionTimeout is on the high side for typical use cases.

> <Connector protocol="org.apache.coyote.http11.Http11Protocol" port="443"
> minSpareThreads="5" maxSpareThreads="75"
These two do nothing in Tomcat 6.

> enableLookups="true"
That will hurt. Do you *really* need to enable this? (Just noticed the docs are
wrong - they claim this is enabled by default - it isn't - it is disabled)

> disableUploadTimeout="true" acceptCount="100" maxThreads="400"
> scheme="https" secure="true" SSLEnabled="true"
> keystoreFile="D:\Certificate\Cert.key" keystorePass="pwd"
> clientAuth="false" sslProtocol="TLS" />
This all looks normal.

Mark


---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org


Mime
View raw message