How can I make tomcat 3.2 work with SSL ?

[ka...@in.ibm.com]

Please reply to me directly a I am not a member of the mailing list.

> Do I have to compile tomcat 3.2 source to have the SSL feature working or
the download binary will work ?

Thanks in advance.
- Ashish

Re: valueUnbound() event in HttpSessionBindingListener

["Craig R. McClanahan" <Cr...@eng.sun.com>]

"G.Nagarajan" wrote:

>
> How is it actually done internally? i.e., is there a thread similar to the
> garbage
> collector which checks the current sessions or is the session invalidated
> only
> when a request comes from the client. The second option will mean that the
> objects
> in the session will be occupying memory till the server is shutdown.
>

Tomcat uses a background thread that times sessions out.  By default, it checks
once per minute.

> Nagaraj.

Craig McClanahan

valueUnbound() event in HttpSessionBindingListener

["G.Nagarajan" <gn...@dkf.de>]

Hi everyone,

This is regarding tracking of login and logout actions of users.

I am recording the session creation time and end time using the
HttpSessionBindingListener class. The two methods valueBound() and
valueUnbound() are
invoked. But the getAtrribute() method in the session object returned by
event.getSession()
always give null.

I am storing the userid and a string in the session to indicate if the user
has logged out.
By checking this string's value I can find out if the user has logged out or
the session has timed out.

What I did to solve this problem was to store the sessionid and the userid
in
an external database. When the user logs out, before invalidating the
session, I
put "LoggedOut" in the loginStatus column. In the valueUnbound() event, I
check
the value of the loginStatus column to check if the event has been called
because
of the user logging out or if the session has timed out.

How is it actually done internally? i.e., is there a thread similar to the
garbage
collector which checks the current sessions or is the session invalidated
only
when a request comes from the client. The second option will mean that the
objects
in the session will be occupying memory till the server is shutdown.

Has anyone implemented anything similar to this.

Thanks,
Nagaraj.

Re: How can I make tomcat 3.2 work with SSL ?

["Craig R. McClanahan" <Cr...@eng.sun.com>]

kashish@in.ibm.com wrote:

> Please reply to me directly a I am not a member of the mailing list.
>
> > Do I have to compile tomcat 3.2 source to have the SSL feature working or
> the download binary will work ?
>

Tomcat 3.2 final has the SSL-specific parts of Tomcat already compiled.
However, you will still need to download and install the Java Secure Sockets
Extension (JSSE) package appropriate for your country from http://java.sun.com
in order to set up SSL connections.

>
> Thanks in advance.
> - Ashish

Craig McClanahan