tomcat-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Christopher Schultz <ch...@christopherschultz.net>
Subject Re: Exception in CoyoteAdapter class
Date Fri, 20 Dec 2013 19:54:27 GMT
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

André,

On 12/20/13, 4:59 AM, André Warnier wrote:
> Maybe : your configuration does not seem to make sense. (or it
> works differently from what you think, or we do not understand what
> you are telling us) From the history of this thread, it seems so
> far that you are reporting an issue that should not be possible
> given the other information that you have provided. So you have got
> everyone confused.

+1

> Maybe some facts first :
> 
> 1) The AJP protocol does NOT support SSL/HTTPS.
> 
> AJP is its own protocol, different from HTTP/HTTPS.  It is used 
> exclusively between a front-end HTTP/HTTPS webserver, and a
> back-end Tomcat server.
> 
> It "transports" or "forwards" HTTP/HTTPS requests (including
> HTTP/HTTPS headers and SSL-specific information) between the
> front-end webserver and the back-end Tomcat, but the format in
> which it transports this information is not the same as
> HTTP/HTTPS. And it is always unencrypted.

+1

Most connectors (mod_jk, mod_proxy_ajp) are capable of transmitting
important information about the HTTPS connection to the back-end...
specifically, you can get the client certificate chain, key length and
cipher, etc.

> but, with the information that you have provided so far, it is not
> clear to the people on this list which of the above schemas you are
> using, or if you are even using one of the above.
> 
> So I believe that you should make that clear first, and after that
> maybe someone can help you answer your questions.

+1

- -chris

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
Comment: GPGTools - http://gpgtools.org
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/
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=PPMJ
-----END PGP SIGNATURE-----

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org


Mime
View raw message