Re: transport CONFIDENTIAL based on remote ip/host filter?

[Christopher Schultz <ch...@christopherschultz.net>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Konstantin,

On 5/31/12 3:30 PM, Konstantin Kolinko wrote:
> 2012/5/31 Timothy J Schumacher <Ti...@colorado.edu>:
>> Hi,
>> 
>> We are using Apache Tomcat 6.0.35
>> 
>> with
>> 
>> # java -version java version "1.6.0_30" Java(TM) SE Runtime
>> Environment (build 1.6.0_30-b12) Java HotSpot(TM) Client VM
>> (build 20.5-b03, mixed mode, sharing)
>> 
>> in redhat linux.
>> 
>> I am wondering if there is a way to use transport CONFIDENTIAL
>> for all hosts that are not localhost?  I am guessing the servlet
>> spec does not allow this, it seems to be all or none in the
>> web.xml config.  Perhaps there is a way configure transport NONE
>> in web.xml and then manually configure a valve/filter in
>> context.xml that would enforce CONFIDENTIAL to all remote hosts
>> but let localhost pass without redirects to port 443?
>> 
>> Any ideas are appreciated!
>> 
> 
> <Connector ... address="127.0.0.1" secure="true" />
> 
> It will 1. Listen on localhost only. 2. Be treated by Tomcat as if
> it were an HTTPS connection.

One thing you left out: at this point, you can use a CONFIDENTIAL
<transport-guarantee> in web.xml and you won't /require/ HTTPS from
localhost.

- -chris
-----BEGIN PGP SIGNATURE-----
Version: GnuPG/MacGPG2 v2.0.17 (Darwin)
Comment: GPGTools - http://gpgtools.org
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAk/H74oACgkQ9CaO5/Lv0PBiZACgv6HdgvpKvg3jDagtPM9Y+YzV
89QAn3HxtJogIYlZHn3tNqPOuL8fIxXE
=l4AD
-----END PGP SIGNATURE-----

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org

Re: mod_jk2 question

[Konstantin Kolinko <kn...@gmail.com>]

2012/6/1 이재만 <le...@naver.com>:
> Thanks in advance.Currently my site is being used in the tomcat + apache.Version 2.0 uses Apache, Tomcat will use the point-to-5.Airline reservation system, which during use, the customer booking the reservation there is a duplicate of the trouble it hurts.During which we use mod_jk2, default options are being used. Tomcat from mod_jk2 can call you in duplicate to wonder whether possession.
>

1. What is your problem?  Your English is hard to understand.

What duplicate? What trouble? What hurts?

2. "mod_jk2" is dead and broken.

The connector that people should use is "mod_jk".

Best regards,
Konstantin Kolinko

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org

mod_jk2 question

[이재만 <le...@naver.com>]

Thanks in advance.Currently my site is being used in the tomcat + apache.Version 2.0 uses Apache, Tomcat will use the point-to-5.Airline reservation system, which during use, the customer booking the reservation there is a duplicate of the trouble it hurts.During which we use mod_jk2, default options are being used. Tomcat from mod_jk2 can call you in duplicate to wonder whether possession.

Thanks.