Re: transport CONFIDENTIAL based on remote ip/host filter?

2012-06-05 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Timothy, On 6/4/12 7:11 PM, Timothy J Schumacher wrote: > Yes, this is way better-Thanks! I guess I wasn't realizing that > forcing clients to use https implies "transport confidential" > without actually configuring transport confidential in the > w

Re: transport CONFIDENTIAL based on remote ip/host filter?

2012-06-05 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Timothy, I have some suggestions (inline). On 6/4/12 5:58 PM, Timothy J Schumacher wrote: > We run the local firefox in kiosk mode, and when the device is > powered on, firefox prompts the user about security certificate > warnings and alerts the use

Re: transport CONFIDENTIAL based on remote ip/host filter?

2012-06-04 Thread Timothy J Schumacher
Comments inline below. On 6/4/2012 4:18 PM, Konstantin Kolinko wrote: 2012/6/5 Timothy J Schumacher: We make a piece of IT equipment with tomcat running inside serving an application that acts as the administration console for the device. There is also a firefox browser running inside the equi

Re: transport CONFIDENTIAL based on remote ip/host filter?

2012-06-04 Thread Konstantin Kolinko
2012/6/5 Timothy J Schumacher : > > We make a piece of IT equipment with tomcat running inside serving an > application that acts as the administration console for the device.  There > is also a firefox browser running inside the equipment that exposes the web > application in question on the front

Re: transport CONFIDENTIAL based on remote ip/host filter?

2012-06-04 Thread Timothy J Schumacher
See inline comments below. Thanks again for your time! Tim On 6/4/2012 2:35 PM, Konstantin Kolinko wrote: 2012/6/4 Timothy J Schumacher: On 5/31/2012 1:30 PM, Konstantin Kolinko wrote: 2012/5/31 Timothy J Schumacher: Hi, We are using Apache Tomcat 6.0.35 with # java -version java version

Re: transport CONFIDENTIAL based on remote ip/host filter?

2012-06-04 Thread Konstantin Kolinko
2012/6/4 Timothy J Schumacher : > On 5/31/2012 1:30 PM, Konstantin Kolinko wrote: >> >> 2012/5/31 Timothy J Schumacher: >>> >>> Hi, >>> >>> We are using Apache Tomcat 6.0.35 >>> >>> with >>> >>> # java -version >>> java version "1.6.0_30" >>> Java(TM) SE Runtime Environment (build 1.6.0_30-b12) >>>

Re: transport CONFIDENTIAL based on remote ip/host filter?

2012-06-04 Thread Timothy J Schumacher
On 5/31/2012 1:30 PM, Konstantin Kolinko wrote: 2012/5/31 Timothy J Schumacher: Hi, We are using Apache Tomcat 6.0.35 with # java -version java version "1.6.0_30" Java(TM) SE Runtime Environment (build 1.6.0_30-b12) Java HotSpot(TM) Client VM (build 20.5-b03, mixed mode, sharing) in redhat l

Re: transport CONFIDENTIAL based on remote ip/host filter?

2012-05-31 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Konstantin, On 5/31/12 3:30 PM, Konstantin Kolinko wrote: > 2012/5/31 Timothy J Schumacher : >> Hi, >> >> We are using Apache Tomcat 6.0.35 >> >> with >> >> # java -version java version "1.6.0_30" Java(TM) SE Runtime >> Environment (build 1.6.0_30-

Re: transport CONFIDENTIAL based on remote ip/host filter?

2012-05-31 Thread Konstantin Kolinko
2012/5/31 Timothy J Schumacher : > Hi, > > We are using Apache Tomcat 6.0.35 > > with > > # java -version > java version "1.6.0_30" > Java(TM) SE Runtime Environment (build 1.6.0_30-b12) > Java HotSpot(TM) Client VM (build 20.5-b03, mixed mode, sharing) > > in redhat linux. > > I am wondering if th

Re: transport CONFIDENTIAL based on remote ip/host filter?

2012-05-31 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Tim, On 5/31/12 1:16 PM, Timothy J Schumacher wrote: > I am wondering if there is a way to use transport CONFIDENTIAL for > all hosts that are not localhost? I am guessing the servlet spec > does not allow this, it seems to be all or none in the web.

transport CONFIDENTIAL based on remote ip/host filter?

2012-05-31 Thread Timothy J Schumacher
Hi, We are using Apache Tomcat 6.0.35 with # java -version java version "1.6.0_30" Java(TM) SE Runtime Environment (build 1.6.0_30-b12) Java HotSpot(TM) Client VM (build 20.5-b03, mixed mode, sharing) in redhat linux. I am wondering if there is a way to use transport CONFIDENTIAL for all hos