Our environment is a Web Server (NES 3.5.1) with Web Sphere 2 or JRun 2.3
in front of a firewall. An application server written in Java communicating
with the Servlet via RMI and a database via JDBC. The application server
and database server are behind the firewall. We are currently looking at
using the SSL package from Phaos for the RMI socket factory between the
servlet and app server.
1. Has anyone set up a pool of RMI connections like a pool of database
connections for the servlet threads to grab and use? Theoretically,
this seems like a good idea to us since we think that each servlet
thread would have to create a new RMI connection and do the SSL work
necessary taking up time. Please let me know if I am making wrong
assumptions...
2. Our security auditors agreed that we are okay to go without a certificate
between the web server and the app server since it is a physical link
also governed by the firewall filters; however, the SSL package that
we are looking at seems to require a cert. Has anyone had similar
experience? We are willing to try other packages.
Thanks in advance.
- jeremiah
Jeremiah Johnson
[EMAIL PROTECTED]
___________________________________________________________________________
To unsubscribe, send email to [EMAIL PROTECTED] and include in the body
of the message "signoff SERVLET-INTEREST".
Archives: http://archives.java.sun.com/archives/servlet-interest.html
Resources: http://java.sun.com/products/servlet/external-resources.html
LISTSERV Help: http://www.lsoft.com/manuals/user/user.html