You are viewing a plain text version of this content. The canonical link for it is here.
Posted to user@struts.apache.org by Ken McWilliams <ke...@gmail.com> on 2010/11/09 22:12:13 UTC
Struts2 - implementing SSL
I'm just looking into this and have never implemented ssl before.
I found this: http://code.google.com/p/struts2-ssl-plugin/ and was
wondering if anyone here has used it?
I looked on this list https://cwiki.apache.org/S2PLUGINS/home.html
and didn't see any explicit mention of SSL, nor did I find reference in
"Struts2 in Action" or "Apache Struts 2 Web Application Development".
---------------------------------------------------------------------
To unsubscribe, e-mail: user-unsubscribe@struts.apache.org
For additional commands, e-mail: user-help@struts.apache.org
Re: Struts2 - implementing SSL
Posted by Steven Yang <ke...@gmail.com>.
yes using SSL provided by web container or http server is the way to go
i think the struts ssl plugin only provide convenient way to redirect
certain page to https/http.
for example, you might want to force your login page to be always accessed
using https then it can help you easily redirect all http access to https
On Wed, Nov 10, 2010 at 6:56 AM, Miguel <mi...@gmail.com> wrote:
> Hello,
> I haven't used that plugin, but I recomend you to use the SSL provided
> by tomcat or your web container, it's easier.
> But if you want the best speed, i really suggest yo to use apache
> httpd with mod_ssl for the ssl work and mod_jk, to forward the traffic
> to tomcat or jetty. You can find documentation about this in the
> tomcat connectors page and the httpd documentation.
> Regards,
>
> Si quieres ser más positivo, pierde un electrón
> Miguel Ruiz Velasco Sobrino
>
>
>
> On Tue, Nov 9, 2010 at 15:12, Ken McWilliams <ke...@gmail.com>
> wrote:
> > I'm just looking into this and have never implemented ssl before.
> >
> > I found this: http://code.google.com/p/struts2-ssl-plugin/ and was
> > wondering if anyone here has used it?
> >
> > I looked on this list https://cwiki.apache.org/S2PLUGINS/home.html
> > and didn't see any explicit mention of SSL, nor did I find reference in
> > "Struts2 in Action" or "Apache Struts 2 Web Application Development".
> >
> >
> > ---------------------------------------------------------------------
> > To unsubscribe, e-mail: user-unsubscribe@struts.apache.org
> > For additional commands, e-mail: user-help@struts.apache.org
> >
> >
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: user-unsubscribe@struts.apache.org
> For additional commands, e-mail: user-help@struts.apache.org
>
>
Re: Struts2 - implementing SSL
Posted by Miguel <mi...@gmail.com>.
Hello Pawel,
No, I don't have any benchmarks about the speed of mod_ssl vs tomcat
ssl. I prefer apache with mod_ssl because I'm familiar with the
configuration of open_ssl, I have the perception of being more secure
to separate the application web server from the front webserver, and
because mod_jk has clustering capabilities, and that permits me to add
and remove tomcat instances to manage capacity using a single apache
httpd server (and a single IP).
Beyond that, you need to take into account that you can operate tomcat
in "pure java mode" using the java ssl (configured in the java way),
or in "native mode" using tomcat native, using openssl (and is
configured in the openssl way), and the performance difference is
significative.
Those are my reasons for my preference.
Regards,
Si quieres ser más positivo, pierde un electrón
Miguel Ruiz Velasco Sobrino
2010/11/10 Paweł Wielgus <po...@gmail.com>:
> Hi Miguel,
> do You have or know of any real life benchmarks that shows that tomcat
> ssl is slower than apache mod_ssl?
>
> Best greetings,
> Paweł Wielgus.
>
> 2010/11/9 Miguel <mi...@gmail.com>:
>> Hello,
>> I haven't used that plugin, but I recomend you to use the SSL provided
>> by tomcat or your web container, it's easier.
>> But if you want the best speed, i really suggest yo to use apache
>> httpd with mod_ssl for the ssl work and mod_jk, to forward the traffic
>> to tomcat or jetty. You can find documentation about this in the
>> tomcat connectors page and the httpd documentation.
>> Regards,
>>
>> Si quieres ser más positivo, pierde un electrón
>> Miguel Ruiz Velasco Sobrino
>>
>>
>>
>> On Tue, Nov 9, 2010 at 15:12, Ken McWilliams <ke...@gmail.com> wrote:
>>> I'm just looking into this and have never implemented ssl before.
>>>
>>> I found this: http://code.google.com/p/struts2-ssl-plugin/ and was
>>> wondering if anyone here has used it?
>>>
>>> I looked on this list https://cwiki.apache.org/S2PLUGINS/home.html
>>> and didn't see any explicit mention of SSL, nor did I find reference in
>>> "Struts2 in Action" or "Apache Struts 2 Web Application Development".
>>>
>>>
>>> ---------------------------------------------------------------------
>>> To unsubscribe, e-mail: user-unsubscribe@struts.apache.org
>>> For additional commands, e-mail: user-help@struts.apache.org
>>>
>>>
>>
>> ---------------------------------------------------------------------
>> To unsubscribe, e-mail: user-unsubscribe@struts.apache.org
>> For additional commands, e-mail: user-help@struts.apache.org
>>
>>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: user-unsubscribe@struts.apache.org
> For additional commands, e-mail: user-help@struts.apache.org
>
>
---------------------------------------------------------------------
To unsubscribe, e-mail: user-unsubscribe@struts.apache.org
For additional commands, e-mail: user-help@struts.apache.org
Re: Struts2 - implementing SSL
Posted by Paweł Wielgus <po...@gmail.com>.
Hi Miguel,
do You have or know of any real life benchmarks that shows that tomcat
ssl is slower than apache mod_ssl?
Best greetings,
Paweł Wielgus.
2010/11/9 Miguel <mi...@gmail.com>:
> Hello,
> I haven't used that plugin, but I recomend you to use the SSL provided
> by tomcat or your web container, it's easier.
> But if you want the best speed, i really suggest yo to use apache
> httpd with mod_ssl for the ssl work and mod_jk, to forward the traffic
> to tomcat or jetty. You can find documentation about this in the
> tomcat connectors page and the httpd documentation.
> Regards,
>
> Si quieres ser más positivo, pierde un electrón
> Miguel Ruiz Velasco Sobrino
>
>
>
> On Tue, Nov 9, 2010 at 15:12, Ken McWilliams <ke...@gmail.com> wrote:
>> I'm just looking into this and have never implemented ssl before.
>>
>> I found this: http://code.google.com/p/struts2-ssl-plugin/ and was
>> wondering if anyone here has used it?
>>
>> I looked on this list https://cwiki.apache.org/S2PLUGINS/home.html
>> and didn't see any explicit mention of SSL, nor did I find reference in
>> "Struts2 in Action" or "Apache Struts 2 Web Application Development".
>>
>>
>> ---------------------------------------------------------------------
>> To unsubscribe, e-mail: user-unsubscribe@struts.apache.org
>> For additional commands, e-mail: user-help@struts.apache.org
>>
>>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: user-unsubscribe@struts.apache.org
> For additional commands, e-mail: user-help@struts.apache.org
>
>
---------------------------------------------------------------------
To unsubscribe, e-mail: user-unsubscribe@struts.apache.org
For additional commands, e-mail: user-help@struts.apache.org
Re: Struts2 - implementing SSL
Posted by Miguel <mi...@gmail.com>.
Hello,
I haven't used that plugin, but I recomend you to use the SSL provided
by tomcat or your web container, it's easier.
But if you want the best speed, i really suggest yo to use apache
httpd with mod_ssl for the ssl work and mod_jk, to forward the traffic
to tomcat or jetty. You can find documentation about this in the
tomcat connectors page and the httpd documentation.
Regards,
Si quieres ser más positivo, pierde un electrón
Miguel Ruiz Velasco Sobrino
On Tue, Nov 9, 2010 at 15:12, Ken McWilliams <ke...@gmail.com> wrote:
> I'm just looking into this and have never implemented ssl before.
>
> I found this: http://code.google.com/p/struts2-ssl-plugin/ and was
> wondering if anyone here has used it?
>
> I looked on this list https://cwiki.apache.org/S2PLUGINS/home.html
> and didn't see any explicit mention of SSL, nor did I find reference in
> "Struts2 in Action" or "Apache Struts 2 Web Application Development".
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: user-unsubscribe@struts.apache.org
> For additional commands, e-mail: user-help@struts.apache.org
>
>
---------------------------------------------------------------------
To unsubscribe, e-mail: user-unsubscribe@struts.apache.org
For additional commands, e-mail: user-help@struts.apache.org