> From: André Warnier [mailto:a...@ice-sa.com] 
> Subject: Re: enforcing SSL only for external clients

> You will probably need 2 separate <Connectors>, one for HTTP and 
> the other for HTTPS.

I think that's true.

> You probably need to set the "useIPVHosts" attribute inside your 
> <Connector> tags to "true".

Probably not necessary, nor are multiple <Host> elements.

How about just setting the address attribute for the port 80 <Connector> to 
"127.0.0.1", and the port 443 <Connector> to the public IP address, and *do 
not* set <transport-guarantee> to CONFIDENTIAL in the web.xml files.  

 - Chuck


THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY 
MATERIAL and is thus for use only by the intended recipient. If you received 
this in error, please contact the sender and delete the e-mail and its 
attachments from all computers.


---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Reply via email to