Our environment is a Web Server (NES 3.5.1) with Web Sphere 2 or JRun 2.3
in front of a firewall.  An application server written in Java communicating
with the Servlet via RMI and a database via JDBC.  The application server
and database server are behind the firewall.  We are currently looking at
using the SSL package from Phaos for the RMI socket factory between the
servlet and app server.

1. Has anyone set up a pool of RMI connections like a pool of database
        connections for the servlet threads to grab and use?  Theoretically,
        this seems like a good idea to us since we think that each servlet
        thread would have to create a new RMI connection and do the SSL work
        necessary taking up time.  Please let me know if I am making wrong
        assumptions...

2. Our security auditors agreed that we are okay to go without a certificate
        between the web server and the app server since it is a physical link
        also governed by the firewall filters; however, the SSL package that
        we are looking at seems to require a cert.  Has anyone had similar
        experience?  We are willing to try other packages.

Thanks in advance.

                                                        - jeremiah



Jeremiah Johnson

[EMAIL PROTECTED]

___________________________________________________________________________
To unsubscribe, send email to [EMAIL PROTECTED] and include in the body
of the message "signoff SERVLET-INTEREST".

Archives: http://archives.java.sun.com/archives/servlet-interest.html
Resources: http://java.sun.com/products/servlet/external-resources.html
LISTSERV Help: http://www.lsoft.com/manuals/user/user.html

Reply via email to