-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Asha,

On 11/23/11 5:53 AM, Asha K S wrote:
> Thank you all for helping me in this regard. Can you please point
> me to documentation which helps me configure https between Apache
> and Tomcat.

Read the documentation for "Tomcat Connectors" on the Tomcat web site.

> Also in AJPv13 extensions proposal 
> (http://tomcat.apache.org/connectors-doc/ajp/ajpv13ext.html) one
> add on suggests "Basic authorisation system, where a shared secret
> key is present in web server and servlet engine" do we know if this
> is still under consideration.

This document seems to be horribly out of date. Read the documentation
for the features that have actually been implemented:

http://tomcat.apache.org/connectors-doc/reference/workers.html


Specifically, look for "secret".

Note that this is not /not/ *NOT* encryption. It's merely a pre-shared
code that gets inserted into the request for validation. It merely
prevents random people from making unexpected requests to your ajp
service.

- -chris
-----BEGIN PGP SIGNATURE-----
Version: GnuPG/MacGPG2 v2.0.17 (Darwin)
Comment: GPGTools - http://gpgtools.org
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAk7NGSQACgkQ9CaO5/Lv0PAkvACfWXifNd5Hb/uLyXHsPoHQRcnl
mSUAnRpb8JtVGK6EZmdcLdCb6hiXL8C3
=s0jN
-----END PGP SIGNATURE-----

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Reply via email to