RE: Question regarding Tomcat and Apache HTTPD Mod-proxy over SSL [EXTERNAL]

2022-06-03 Thread jonmcalexander
rg > Subject: Re: Question regarding Tomcat and Apache HTTPD Mod-proxy over > SSL [EXTERNAL] > > Jon, > > If you want to secure the httpd <-> Tomcat link with mutually authenticated > TLS then I believe it is possible based on reading the docs but a) haven't &g

Re: Question regarding Tomcat and Apache HTTPD Mod-proxy over SSL [EXTERNAL]

2022-06-03 Thread Mark Thomas
but a security architect wants the other as well. Thanks, Sent with BlackBerry Work (www.blackberry.com) From: Christopher Schultz Sent: Jun 2, 2022 5:05 PM To: users@tomcat.apache.org Subject: Re: Question regarding Tomcat and Apache HTTPD Mod-proxy over SSL

RE: Question regarding Tomcat and Apache HTTPD Mod-proxy over SSL [EXTERNAL]

2022-06-02 Thread jonmcalexander
y.com) From: Christopher Schultz Sent: Jun 2, 2022 5:05 PM To: users@tomcat.apache.org Subject: Re: Question regarding Tomcat and Apache HTTPD Mod-proxy over SSL [EXTERNAL] On 6/2/22 14:38, Beard, Shawn wrote: > I've never done this. But I think it would go something like thi

Re: Question regarding Tomcat and Apache HTTPD Mod-proxy over SSL [EXTERNAL]

2022-06-02 Thread Christopher Schultz
On 6/2/22 14:38, Beard, Shawn wrote: > I've never done this. But I think it would go something like this: > To make tomcat take advantages of Client Authentication, require three > certificates. i.e A Server Certificate for Tomcat, Client Certificate > for the browser/Apache and Certificate of the

RE: Question regarding Tomcat and Apache HTTPD Mod-proxy over SSL [EXTERNAL]

2022-06-02 Thread jonmcalexander
u have received this message in error, please advise the sender immediately by reply e-mail and delete this message. Thank you for your cooperation. From: Beard, Shawn Sent: Thursday, June 2, 2022 1:39 PM To: Tomcat Users List Subject: RE: Question regarding Tomcat and Apache HTTPD Mod-proxy ov

RE: Question regarding Tomcat and Apache HTTPD Mod-proxy over SSL [EXTERNAL]

2022-06-02 Thread Beard, Shawn
I've never done this. But I think it would go something like this: To make tomcat take advantages of Client Authentication, require three certificates. i.e A Server Certificate for Tomcat, Client Certificate for the browser/Apache and Certificate of the CA which will sign both the above mentione