Hello, I am building an application that will provide support services to client applications running on the users' machines. Communication between clients and the server is XML-RPC based and must be secure, i.e. use SSL for both client and server authentication. The server will have to be able to generate certificates for clients (it will be a certificate authority). The server will eventually work as a cluster of JBosses, but for now only one JBoss is used.
Question: I've read that it is advisable to perform the SSL authentication in a separate web server (e.g. Apache) that forwards requests to the cluster. This makes sense to me, especially since I wouldn't want to replicate the SSL configuration in each app server in the cluster. However, the server has to be able to dynamically generate certificates and be able to accept them immediatelly in a subsequent client request. This means that the intermediary web server performing SSL authentication of clients must be dynamically supplied with a new client certificate that needs to be honoured. It doesn't help that the business logic performing the generation of client certificates will reside in app servers, i.e. not on the intermediary web server. Has anyone encountered this problem? How can I create this distributed architecture with the least pain, if at all? Thanks, Alex View the original post : http://www.jboss.org/index.html?module=bb&op=viewtopic&p=3845377#3845377 Reply to the post : http://www.jboss.org/index.html?module=bb&op=posting&mode=reply&p=3845377 ------------------------------------------------------- SF.Net email is sponsored by Shop4tech.com-Lowest price on Blank Media 100pk Sonic DVD-R 4x for only $29 -100pk Sonic DVD+R for only $33 Save 50% off Retail on Ink & Toner - Free Shipping and Free Gift. http://www.shop4tech.com/z/Inkjet_Cartridges/9_108_r285 _______________________________________________ JBoss-user mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/jboss-user
