You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@tomcat.apache.org by Florian Kirchhoff <Fl...@qwest.com> on 2009/08/10 23:09:11 UTC
Is encryption of AJP traffic between Apache and Tomcat possible out
of the box?
Hi,
I know this has been asked before, but after reading the documentation and
searching previous threads:
http://www.nabble.com/Is-this-possibe---mod_jk-%3C%3D%3DSSL%3D%3D%3E-AJP-1.3-to7746284.html#a7764525
2006 thread
http://www.nabble.com/AJP-talking-TLS-or-SSL-to12245661.html#a12245661 2007
thread
I am seeking confirmation that AJP traffic still cannot be encrypted out of
the box.
Is this correct?
Thanks in advance.
Florian
--
View this message in context: http://www.nabble.com/Is-encryption-of-AJP-traffic-between-Apache-and-Tomcat-possible-out-of-the-box--tp24907547p24907547.html
Sent from the Tomcat - User mailing list archive at Nabble.com.
Re: Is encryption of AJP traffic between Apache and Tomcat possible
out of the box?
Posted by Christopher Schultz <ch...@christopherschultz.net>.
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Tim,
On 8/10/2009 8:15 PM, Tim Funk wrote:
> An ssh tunnel is also easy too. (but can also open other security holes
> depending on how its deployed and the requirements)
ssh tunnels also have the possibility of going down. If you want to use
an ssh tunnel, then you have to make arrangements for it to stay open
all the time, even when the network flakes out and the connection needs
to be re-established.
You might want to look into something like rstunnel or autossh for that.
- -chris
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/
iEYEARECAAYFAkqBgXgACgkQ9CaO5/Lv0PCiwQCcDduul1xJNBoRfpDblwXezI8u
HeUAoIdUdAAx2B/I2EAWTl/s9qdBIErZ
=Fa0S
-----END PGP SIGNATURE-----
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org
Re: Is encryption of AJP traffic between Apache and Tomcat possible
out of the box?
Posted by Tim Funk <fu...@apache.org>.
An ssh tunnel is also easy too. (but can also open other security holes
depending on how its deployed and the requirements)
-Tim
Mark Thomas wrote:
> Florian Kirchhoff wrote:
>> Hi,
>>
>>
>> I know this has been asked before, but after reading the documentation and
>> searching previous threads:
>>
>> http://www.nabble.com/Is-this-possibe---mod_jk-%3C%3D%3DSSL%3D%3D%3E-AJP-1.3-to7746284.html#a7764525
>> 2006 thread
>>
>>
>> http://www.nabble.com/AJP-talking-TLS-or-SSL-to12245661.html#a12245661 2007
>> thread
>>
>>
>> I am seeking confirmation that AJP traffic still cannot be encrypted out of
>> the box.
>>
>> Is this correct?
>
> Yes.
>
> If you need httpd<->tomcat encryption use mod_proxy_http and proxy over
> https. (not the only way but - in my view - by far the simplest)
>
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org
Re: Is encryption of AJP traffic between Apache and Tomcat possible
out of the box?
Posted by Mark Thomas <ma...@apache.org>.
Florian Kirchhoff wrote:
> Hi,
>
>
> I know this has been asked before, but after reading the documentation and
> searching previous threads:
>
> http://www.nabble.com/Is-this-possibe---mod_jk-%3C%3D%3DSSL%3D%3D%3E-AJP-1.3-to7746284.html#a7764525
> 2006 thread
>
>
> http://www.nabble.com/AJP-talking-TLS-or-SSL-to12245661.html#a12245661 2007
> thread
>
>
> I am seeking confirmation that AJP traffic still cannot be encrypted out of
> the box.
>
> Is this correct?
Yes.
If you need httpd<->tomcat encryption use mod_proxy_http and proxy over
https. (not the only way but - in my view - by far the simplest)
Mark
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org