On Sep 30, 2013, at 9:24 AM, Leonardo Torres <[email protected]> wrote:
First, please don't top post. Reply at the bottom or inline, like I'm doing. > Currently, the communication between httpd and tomcat is via HTTP. Is that OK? Does it need to be encrypted? > > Tomcat version is 7.0.42 > > I have a resource within the tomcat that needs to be accessed via SSL, but > the SSL is configured on HTTPD. How can I configure that ? From what you've said, requests to your HTTPD server have been secured with SSL. Those requests will then get forwarded to Tomcat via HTTP. If it is OK that this traffic (possibly on your internal LAN) is unencrypted then all you need to do is setup a RemoteIPValve in Tomcat. https://tomcat.apache.org/tomcat-7.0-doc/config/valve.html#Remote_IP_Valve This will take header information provided by HTTPD and reconfigure the incoming request so that it knows about your HTTPD proxy. The upshot of this is that your application will now be able to check the request and see if it was secured with SSL. Dan > Excuse me, but I'm newbie in server configuration. > > > On Mon, Sep 30, 2013 at 10:11 AM, André Warnier <[email protected]> wrote: > >> Daniel Mikusa wrote: >> >>> On Sep 30, 2013, at 8:20 AM, Leonardo Torres <[email protected]> >>> wrote: >>> >>> Hi guys, >>>> >>>> I have the following structure : >>>> >>>> Apache HTTP (Proxy) --> Tomcat . >>>> >>>> So, I have configured SSL on Apache HTTP, how do I configure SSL in my >>>> application in Tomcat? >>>> >>> >>> Need some more info here... >>> >>> 1.) What version of HTTPD & Tomcat are you using? >>> 2.) Do you need SSL between HTTPD & Tomcat? or do you just want Tomcat >>> to know that SSL has been terminated by HTTPD? >>> 3.) How is HTTPD communicating with Tomcat? via AJP or HTTP? >>> >>> Dan >>> >>> and the reasons for the above judicious questions are : >> >> browser <-- SSL --> httpd + mod_proxy_http <-- SSL or not --> Tomcat >> HTTP/HTTPS Connector >> or httpd + mod_proxy_AJP <-- not SSL --> Tomcat AJP >> Connector >> or httpd + mod_jk <-- not SSL --> Tomcat AJP >> Connector >> >> 2) SSL is "expensive". Apache has to decrypt the browser communication >> anyway. >> The if you use SSL between Apache and Tomcat, Apache has to re-encrypt the >> data, and Tomcat to re-decrypt it. That takes resources, so if you don't >> need it, don't do it. >> Even if you use HTTP/AJP, httpd can pass on to Tomcat the received SSL >> headers, so Tomcat can inspect them. >> 3) AJP does not support SSL >> >> >> ------------------------------**------------------------------**--------- >> To unsubscribe, e-mail: >> users-unsubscribe@tomcat.**apache.org<[email protected]> >> For additional commands, e-mail: [email protected] >> >> > > > -- > *Obrigado > Leonardo Torres, MSc.* --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
