Re: Need some SSL Config help.

2009-08-14 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Josh, On 8/13/2009 2:38 PM, Josh Gooding wrote: So I navigated to https://(domain).com and low and behold it works :). Glad it's working for you. Next few questions: Well, it's your thread, so I guess hijacking isn't that big of a deal... #1 -

Re: Need some SSL Config help.

2009-08-14 Thread Josh Gooding
Thanks Chris, I appreciate it! On Fri, Aug 14, 2009 at 10:30 AM, Christopher Schultz ch...@christopherschultz.net wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Josh, On 8/13/2009 2:38 PM, Josh Gooding wrote: So I navigated to https://(domain).com and low and behold it works :).

Re: Need some SSL Config help.

2009-08-13 Thread Josh Gooding
Ah, I am semi starting to understand now. I was able to use openssl to convert my pfx to a pem file which is part of the battle. From what I have read in the docs, I needed a .crt file as well, which I used the .txt file that the hosting co provided to me. It's nothing but a plain text PGP

Re: Need some SSL Config help.

2009-08-11 Thread Josh Gooding
ok back to the topic at hand here. I have removed httpd from my server, installed APR, and have gotten my cert file from my hosting company. it is in pfx format. Now I found some information on the net: http://tp.its.yale.edu/pipermail/cas/2005-July/001337.html It was saying that I can just

Re: Need some SSL Config help.

2009-08-11 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Josh, On 8/11/2009 4:47 PM, Josh Gooding wrote: ok back to the topic at hand here. I have removed httpd from my server, installed APR, and have gotten my cert file from my hosting company. it is in pfx format. Now I found some information on

Re: Need some SSL Config help.

2009-08-05 Thread Josh Gooding
*Andre wrote: The above is assuming that you would want all accesses which eventually go to Tomcat, to be under SSL from the client point of view. The idea is : SSL creates an overhead (encryption). If the link between Apache and Tomcat is secure (such as, they both run on the same host, or they

Re: Need some SSL Config help.

2009-08-05 Thread Josh Gooding
nevermind, I think I made some headway on this and will ask this over on the httpd list. Thank you for getting me this far, I really appreciate it. On Wed, Aug 5, 2009 at 8:50 AM, Josh Gooding josh.good...@gmail.com wrote: *Andre wrote: The above is assuming that you would want all accesses

Re: Need some SSL Config help.

2009-08-04 Thread Josh Gooding
wait a sec here. I'm a little confused. Let me ask it this way. I have a Login.jsp file that takes uname / pwd and uses j_security_check for authentication. That is the only thing that I want HTTPS on. Everything else is not important. I have setup Apache (httpd) and am forwarding the 1 html

Re: Need some SSL Config help.

2009-08-04 Thread Josh Gooding
Update: So after re-re-reading the docs, since TC is not my standalone webserver, I should configure Apache (httpd) for SSL. That seems to be what I am reading. On Tue, Aug 4, 2009 at 3:43 PM, Josh Gooding josh.good...@gmail.com wrote: wait a sec here. I'm a little confused. Let me ask it

Re: Need some SSL Config help.

2009-08-04 Thread André Warnier
Josh Gooding wrote: Update: So after re-re-reading the docs, since TC is not my standalone webserver, I should configure Apache (httpd) for SSL. That seems to be what I am reading. Yes. Client - SSL - Apache - Ap/To Connector - non-SSL - Tomcat (e.g. mod_jk)

Re: Need some SSL Config help.

2009-07-29 Thread Wesley Acheson
I thought that you only had to set up on apache (httpd server). Thats the way I got it working. see http://tomcat.apache.org/tomcat-6.0-doc/ssl-howto.html#SSL%20and%20Tomcatrelevenat excet below *SSL and Tomcat* *It is important to note that configuring Tomcat to take advantage of secure

Re: Need some SSL Config help.

2009-07-27 Thread Josh Gooding
Just an update. I decided to change up what I was doing. Instead of starting with SSL on tomcat, I ported Apache and Tomcat to work together on my local test server. Now I am going to do the APR. Do I need to configure SSL on both Apache and Tomcat or just Tomcat? On Mon, Jul 27, 2009 at

Re: Need some SSL Config help.

2009-07-27 Thread Serge Fonville
Just an update.  I decided to change up what I was doing.  Instead of starting with SSL on tomcat, I ported Apache and Tomcat to work together on my local test server.  Now I am going to do the APR.  Do I need to configure SSL on both Apache and Tomcat or just Tomcat? If all connections go

Re: Need some SSL Config help.

2009-07-26 Thread Josh Gooding
Thanks all, I appreciate the input. I used http://tomcat.apache.org/tomcat-6.0-doc/ssl-howto.html to attempt to configure SSL. I'll read up on APR. On Sat, Jul 25, 2009 at 6:14 AM, Mark Thomas ma...@apache.org wrote: Josh Gooding wrote: One more thing. Here is my server.xml information

Re: Need some SSL Config help.

2009-07-25 Thread Mark Thomas
Josh Gooding wrote: One more thing. Here is my server.xml information that is relative: Listener className=org.apache.catalina.core.AprLifecycleListener SSLEngine=on SSLRandomSeed=builtin / Looks like you are trying to use the APR connector. Connector port=443 protocol=HTTP/1.1

Need some SSL Config help.

2009-07-24 Thread Josh Gooding
Hello again. Now that I have deployed my project on Tomcat 6.0.18 with a MySQL 5.1 db, I need to clamp the server down tight using SSL. I've already created my keystore file and I am able to get the server to serve on port 443 (by going to http://localhost:443). I can get it to Subsequent

Re: Need some SSL Config help.

2009-07-24 Thread Josh Gooding
One more thing. Here is my server.xml information that is relative: Listener className=org.apache.catalina.core.AprLifecycleListener SSLEngine=on SSLRandomSeed=builtin / Connector port=443 protocol=HTTP/1.1 SSLEnabled=true minSpareThreads=5 maxSpareThreads=75 enableLookups=true

Re: Need some SSL Config help.

2009-07-24 Thread CBy
Josh Gooding wrote: One more thing. Here is my server.xml information that is relative: Listener className=org.apache.catalina.core.AprLifecycleListener SSLEngine=on SSLRandomSeed=builtin / Connector port=443 protocol=HTTP/1.1 SSLEnabled=true minSpareThreads=5 maxSpareThreads=75