tomcat-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Christopher Schultz <ch...@christopherschultz.net>
Subject Re: My web application to use SSL (JSSE - RSA)
Date Fri, 10 Jun 2011 20:45:07 GMT
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Pid,

On 6/10/2011 4:37 PM, Pid wrote:
> On 10/06/2011 21:29, Patrick Flaherty wrote:
>> Hi,
>>
>> Is APR/native Connector dramatically faster then Java Nio Blocking
>> Connector or is it marginal ?
> 
> APR+SSL is a little faster, if I remember correctly, Chris?

I haven't benchmarked SSL configurations, only cleartext HTTP. Both the
APR and NIO connectors were /way/ faster than the BIO connector with
serving static content.

>> I'd love faster SSL but all my keys and certs are java based (keytool).
>> Will APR ever support Java SSL ?
> 
> No.

Converting certs between formats is pretty trivial.

>> I find Java keytool to be reasonably easy to use. Is OpenSSL as easy to
>> use ?
> 
> Yes.

You don't even have to use OpenSSL for anything directly. I like the
APR/SSL configuration better because you don't have to muck-around with
keytool, certificate stores, etc... you just have plain-old PEM files,
just like Apache httpd uses (APR is httpd code, so there you go).

- -chris
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAk3yglMACgkQ9CaO5/Lv0PCRUgCfW0po4Z/BusvAOq9sQOV4QQ5n
4TMAoJeptHzms7bw8/IvQUcW7KURZxuc
=XB/x
-----END PGP SIGNATURE-----

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org


Mime
View raw message