Re: ajp over ssl

2004-08-05 Thread Pete Stokes
Problem with IPSEC / ssh tunnels between two machines is that if someone compromises one machine, then you've made their life 500% easier getting to the next one. Good stuff to connect your home LAN to office LAN, but I wouldn't.. I had trouble with the same thing, and the easy solution I

RE: ajp over ssl

2004-08-05 Thread Ralph Einfeldt
] Sent: Tuesday, August 03, 2004 8:29 AM To: Tomcat Users List Subject: ajp over ssl Hi, I want to connect an Apache Webserver over an unsecure channel to tomcat. What is the preferred method? AJP over a permanent ssh tunnel? I think an AJP connection over SSH would be better. but I

Re: ajp over ssl

2004-08-05 Thread Antonio Fiol Bonnín
Ralph Einfeldt wrote: some other approaches: - cryptcat http://farm9.org/Cryptcat/GetCryptcat.php - openvpn http://openvpn.sourceforge.net/ - tinc http://www.tinc-vpn.org/ - CIPE http://sites.inka.de/sites/bigred/devel/cipe.html What about stunnel? Forwarding an insecure port securely from

Re: ajp over ssl

2004-08-04 Thread Ruth, Brice
That's the best idea I can think of, too. With SSH tunnels using public key authentication, you can set it up so that the tunnel is setup from a system script, without user intervention. David Smith wrote: I'm not sure this can be done. Admittedly I didn't look all that hard -- maybe someone

Re: ajp over ssl

2004-08-04 Thread Greg Ward
On 03 August 2004, Michael J?rgens said: No I want to connect an apache webserver over internet to a tomcat server. So far I have no problem. My problem is, how to secure the connection between apache and tomcat. One idea: you could use mod_proxy as the Apache/Tomcat connection rather than

Re: ajp over ssl

2004-08-04 Thread Michael Jürgens
Ruth, Brice wrote: That's the best idea I can think of, too. With SSH tunnels using public key authentication, you can set it up so that the tunnel is setup from a system script, without user intervention. But what if the tunnel breaks? How can I determine that automaticly? regards, Michael

Re: ajp over ssl

2004-08-04 Thread Dennis Dai
On 8/4/2004 1:37 PM, Michael Jürgens wrote: Ruth, Brice wrote: That's the best idea I can think of, too. With SSH tunnels using public key authentication, you can set it up so that the tunnel is setup from a system script, without user intervention. But what if the tunnel breaks? How can I

ajp over ssl

2004-08-03 Thread Michael Jürgens
Hi, I want to connect an Apache Webserver over an unsecure channel to tomcat. What is the preferred method? AJP over a permanent ssh tunnel? I think an AJP connection over SSH would be better. but I don´t know how to do that. a IPSec Conection is not possible, because of some firewall problems.

Re: ajp over ssl

2004-08-03 Thread Michael Jürgens
Oh sorry I was a little bit tired in the morning. I want to connect the Apache securesd over an unsecure medium (Internet) An my question ist how to connect AJP 1.3 over SSL (not ssh) with jk or jk2. regards, Michael Michael Jürgens wrote: Hi, I want to connect an Apache Webserver over an unsecure

Re: ajp over ssl

2004-08-03 Thread Ruth, Brice
Michael Jürgens wrote: Oh sorry I was a little bit tired in the morning. I want to connect the Apache securesd over an unsecure medium (Internet) An my question ist how to connect AJP 1.3 over SSL (not ssh) with jk or jk2. regards, Michael Michael, I believe you'll want to configure your Apache

Re: ajp over ssl

2004-08-03 Thread Michael Jürgens
Ruth, Brice wrote: Michael Jürgens wrote: Oh sorry I was a little bit tired in the morning. I want to connect the Apache securesd over an unsecure medium (Internet) An my question ist how to connect AJP 1.3 over SSL (not ssh) with jk or jk2. regards, Michael Michael, I believe you'll want to

Re: ajp over ssl

2004-08-03 Thread David Smith
I'm not sure this can be done. Admittedly I didn't look all that hard -- maybe someone who did development work on the connectors can anwer. I can suggest what I did which is setup a tunnel (SSH tunnel in my case) between the two machines. Then they (the servers) can talk all they want and