-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Asha,
On 11/23/11 5:53 AM, Asha K S wrote: > Thank you all for helping me in this regard. Can you please point > me to documentation which helps me configure https between Apache > and Tomcat. Read the documentation for "Tomcat Connectors" on the Tomcat web site. > Also in AJPv13 extensions proposal > (http://tomcat.apache.org/connectors-doc/ajp/ajpv13ext.html) one > add on suggests "Basic authorisation system, where a shared secret > key is present in web server and servlet engine" do we know if this > is still under consideration. This document seems to be horribly out of date. Read the documentation for the features that have actually been implemented: http://tomcat.apache.org/connectors-doc/reference/workers.html Specifically, look for "secret". Note that this is not /not/ *NOT* encryption. It's merely a pre-shared code that gets inserted into the request for validation. It merely prevents random people from making unexpected requests to your ajp service. - -chris -----BEGIN PGP SIGNATURE----- Version: GnuPG/MacGPG2 v2.0.17 (Darwin) Comment: GPGTools - http://gpgtools.org Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iEYEARECAAYFAk7NGSQACgkQ9CaO5/Lv0PAkvACfWXifNd5Hb/uLyXHsPoHQRcnl mSUAnRpb8JtVGK6EZmdcLdCb6hiXL8C3 =s0jN -----END PGP SIGNATURE----- --------------------------------------------------------------------- To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org