On Thu, Feb 11, 2016 at 12:28:40PM -0500, Christopher Schultz wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
> 
> Msh,
> 
> On 2/10/16 7:04 PM, m...@kimwana.com wrote:
> > I have the fillowing problem to solve for a job interview.

Fillowing. Heh! Thanks for the help.

> You have two connectors, but they are both HTTP (non-secure). Part of
> "installing Tomcat as non-root" means that binding to port 443 isn't
> going to work. You need to use a different port.

Yeah, I did realize this. ssl can work
> 
> A few thoughts:
> 
> (1) There is no (stated) requirement that the non-secure web service
> be listening on port 80. There is no (stated) requirement that the
> secure web service be listening on port 443. Perhaps you could
> simplify things by not worrying about traditional port numbers for
> HTTP and HTTPS.

Yeah. It took me a while to remember that http protocol can run on any 
practically any non-reserved port.
Of course browsers expect port 80 so I added a rule in my iptables config 

-A PREROUTING -i eth0 -p tcp -m tcp --dport 80 -j REDIRECT --to-ports 8443

which I think should work. I guess netcat will help me test that theory.


> 
> (2) Everything you need to know about configuring SSL is in Tomcat's
> Users Guide[1] or Configuration Guide[2].
> 
> - -chris
> 
> [1] http://tomcat.apache.org/tomcat-8.0-doc/ssl-howto.html
> [2] http://tomcat.apache.org/tomcat-8.0-doc/config/http.html
> -----BEGIN PGP SIGNATURE-----
> Comment: GPGTools - http://gpgtools.org
> Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/
> 
> iEYEARECAAYFAla8xMgACgkQ9CaO5/Lv0PCIOwCgrSddUZzULTPzL++vmYdQ6P5s
> P2AAoLzk+fasGjjzHOxEilTmvzn6DaUV
> =CuhC
> -----END PGP SIGNATURE-----
> 
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
> For additional commands, e-mail: users-h...@tomcat.apache.org
> 

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Reply via email to