Re: Tomcat 6 + Apache 2.0 with SSL

2007-07-06 Thread Arian Abrahantes
Hi Filik: Just to end this because, probably, I am making a mistake or I didn't make myself clear in my previous post. Do you mean that in the apache configuration in the virtual host definition one must not point the DocumentRoot directive to the folder where your contents are?. Something

Re: Tomcat 6 + Apache 2.0 with SSL

2007-07-06 Thread David Smith
But all the contents of $CATALINA_HOME/webapps/$YOUR_APPLICATION/WEB-INF does become exposed and that should not be. If you are going to do that, you should consider making sure you configure apache httpd to not server up anything contained there. --David Arian Abrahantes wrote: Hi Filik:

Re: Tomcat 6 + Apache 2.0 with SSL

2007-07-06 Thread Roger
Hi there! First of all, thanks for all your replies. I don't know why, but I missed all your replies except the last of course. I'll try to answer your questions. What I need is to have the option to use SSL with Tomcat. Apache httpd is not a necessity. There is no need to have an https

Tomcat 6 + Apache 2.0 with SSL

2007-07-05 Thread Roger
Hi there! I have some questions about how to setup Apache and Tomcat with SSL support. Currently I have the following setup: - Windows 2003 - Tomcat 6.0.13 - Apache 2.0.59 with - openssl 0.9.7j - mod_ssl - mod_proxy - mod_rewrite (not used) I have generated keys that work with Apache. So I

Re: Tomcat 6 + Apache 2.0 with SSL

2007-07-05 Thread Arian Abrahantes
Hi: I think this has alraedy being discussed somewhere here. Why do you need double enchriptation? It is enough with the apache one. Use something like: broweser - https - Apache - http - tomcat pro: 1- Single enchiptation fast server response. cons (at least fo security): 1- none I may

Re: Tomcat 6 + Apache 2.0 with SSL

2007-07-05 Thread Arian Abrahantes
Hi Filik: I understood what he wanted to do. My post is about how needed is this for him?. If it is a company requirement ok. But if there is no requirement why to slow the server down?. IMHO, in a properly set apache proxy configuration nobody except apache will interact with the

Re: Tomcat 6 + Apache 2.0 with SSL

2007-07-05 Thread Filip Hanik - Dev Lists
Arian Abrahantes wrote: Hi Filik: I understood what he wanted to do. My post is about how needed is this for him?. If it is a company requirement ok. But if there is no requirement why to slow the server down?. IMHO, in a properly set apache proxy configuration nobody except apache will