All Well ... I believe I have my answer. Thank you all very much for reading and replying.
Have a good day ________________________________________ From: Zeeshan Ahmad [zah...@i2cinc.com] Sent: Tuesday, June 02, 2009 10:05 AM To: 'Tomcat Users List' Subject: RE: Which Do I SSL - httpd or Tomcat? if your tomcats are accessible from out side world then, you have to add ssl on Tomcats as well otherwise its ok and there should be some security (e.g Firewall) on the network level, thanks. Best Regards, Zeeshan Ahmad. Associate Manager SCM. P Save a tree...pls don't print this e-mail unless necessary -----Original Message----- From: Alston, Brian (US SSA) [mailto:brian.als...@baesystems.com] Sent: Tuesday, June 02, 2009 7:25 PM To: Tomcat Users List Subject: RE: Which Do I SSL - httpd or Tomcat? Hi, Thank you for reading and replying. Can I assume from your reply that if I am not on a secure LAN that I should SSL httpd and both Tomcat servers? Thank You ________________________________________ From: Zeeshan Ahmad [zah...@i2cinc.com] Sent: Tuesday, June 02, 2009 9:15 AM To: 'Tomcat Users List' Subject: RE: Which Do I SSL - httpd or Tomcat? Hello, If your web and application servers are on a secure LAN then this would be better technique if you will add SSL on httpd rather then on all of them, your communication will be over ssl from the client to web server and vice versa. Best Regards, Zeeshan Ahmad. P Save a tree...pls don't print this e-mail unless necessary -----Original Message----- From: Alston, Brian (US SSA) [mailto:brian.als...@baesystems.com] Sent: Tuesday, June 02, 2009 7:03 PM To: users@tomcat.apache.org Subject: Which Do I SSL - httpd or Tomcat? Hello All I have a clustered/load-balanced Apache httpd and Tomcat setup. I have one httpd front end that load balances for two Tomcat back ends. I now want to add SSL to the mix but I am confused. Do I add the SSL to the httpd server, to the two Tomcat servers, or to all of them? Thank you for reading. Have a good day --------------------------------------------------------------------- To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org --------------------------------------------------------------------- To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org --------------------------------------------------------------------- To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org --------------------------------------------------------------------- To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org --------------------------------------------------------------------- To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org