You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@tomcat.apache.org by Hassan Schroeder <ha...@gmail.com> on 2006/12/08 01:57:36 UTC
Re: Is this possibe? mod_jk <==SSL==> AJP/1.3
On 12/7/06, dfelicia <do...@runbox.com> wrote:
> mod_proxy is ... It also doesn't offer
> load-balancing,
Not true; see <http://httpd.apache.org/docs/2.2/mod/mod_proxy_balancer.html>
I've used this recently (with mod_proxy_ajp) and it worked fine. :-)
FWIW,
--
Hassan Schroeder ------------------------ hassan.schroeder@gmail.com
---------------------------------------------------------------------
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org
Re: Is this possibe? mod_jk <==SSL==> AJP/1.3
Posted by fredk2 <fr...@gmail.com>.
ooops - I need to spend more time reading the fine manual :-)
tx for the reminder :)
Hassan Schroeder-2 wrote:
>
> On 12/8/06, fredk2 <fr...@gmail.com> wrote:
>
>> although I have not tested this personally, but I was told that mod_proxy
>> (_ajp) does not have the Auto Flush option that you can set with mod_jk
>> and
>> thus creates problem for streaming applications.
>
> You might want to look at the "flushpackets" parameter to the ProxyPass
> directive <http://httpd.apache.org/docs/2.2/mod/mod_proxy.html> :-)
>
> FWIW,
> --
> Hassan Schroeder ------------------------ hassan.schroeder@gmail.com
>
> ---------------------------------------------------------------------
> To start a new topic, e-mail: users@tomcat.apache.org
> To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
> For additional commands, e-mail: users-help@tomcat.apache.org
>
>
>
--
View this message in context: http://www.nabble.com/Is-this-possibe---mod_jk-%3C%3D%3DSSL%3D%3D%3E-AJP-1.3-tf2776640.html#a7760968
Sent from the Tomcat - User mailing list archive at Nabble.com.
---------------------------------------------------------------------
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org
Re: Is this possibe? mod_jk <==SSL==> AJP/1.3
Posted by Hassan Schroeder <ha...@gmail.com>.
On 12/8/06, fredk2 <fr...@gmail.com> wrote:
> although I have not tested this personally, but I was told that mod_proxy
> (_ajp) does not have the Auto Flush option that you can set with mod_jk and
> thus creates problem for streaming applications.
You might want to look at the "flushpackets" parameter to the ProxyPass
directive <http://httpd.apache.org/docs/2.2/mod/mod_proxy.html> :-)
FWIW,
--
Hassan Schroeder ------------------------ hassan.schroeder@gmail.com
---------------------------------------------------------------------
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org
Re: Is this possibe? mod_jk <==SSL==> AJP/1.3
Posted by fredk2 <fr...@gmail.com>.
Hi,
although I have not tested this personally, but I was told that mod_proxy
(_ajp) does not have the Auto Flush option that you can set with mod_jk and
thus creates problem for streaming applications.
I wonder if others came accross this problem ?
Rgds - Fred
Hassan Schroeder-2 wrote:
>
> On 12/7/06, dfelicia <do...@runbox.com> wrote:
>
>> mod_proxy is ... It also doesn't offer
>> load-balancing,
>
> Not true; see
> <http://httpd.apache.org/docs/2.2/mod/mod_proxy_balancer.html>
>
> I've used this recently (with mod_proxy_ajp) and it worked fine. :-)
>
> FWIW,
> --
> Hassan Schroeder ------------------------ hassan.schroeder@gmail.com
>
> ---------------------------------------------------------------------
> To start a new topic, e-mail: users@tomcat.apache.org
> To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
> For additional commands, e-mail: users-help@tomcat.apache.org
>
>
>
--
View this message in context: http://www.nabble.com/Is-this-possibe---mod_jk-%3C%3D%3DSSL%3D%3D%3E-AJP-1.3-tf2776640.html#a7758513
Sent from the Tomcat - User mailing list archive at Nabble.com.
---------------------------------------------------------------------
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org
Re: How To Migrate
Posted by Christopher Schultz <ch...@christopherschultz.net>.
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Eugene,
Eugene Poole wrote:
> Also, I see that what
> worked for mod_jk no longer works well. Is there some documentation
> available for migrating apache version 2.0.47 to version 2.2.3?
As for migration Apache httpd, mod_jk does still work. You will need to
recompile mod_jk against your new Apache httpd version in order to use
it, though.
- -chris
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQFFgvd29CaO5/Lv0PARAsn3AJwLta+oTe9UA9HLjo9X2xgZxqAqzgCdHgEb
juBYSXLQMGKaBNHcWFjw21k=
=Wx4/
-----END PGP SIGNATURE-----
---------------------------------------------------------------------
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org
How To Migrate
Posted by Eugene Poole <et...@adelphia.net>.
I've recently moved from fedora core 4 to fedora core 6 and during that
process the tomcat being used is version 5.5.17. I kept a backup of my
original tomcat version 5.0.28. I would like to know is there some
documentation on migrating from 5.0.x to 5.5.x? Also, I see that what
worked for mod_jk no longer works well. Is there some documentation
available for migrating apache version 2.0.47 to version 2.2.3?
TIA
Gene
etpoole@adelphia.net
---------------------------------------------------------------------
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org
Re: Is this possibe? mod_jk <==SSL==> AJP/1.3
Posted by dfelicia <do...@runbox.com>.
>yes. Bill's original statement is accurate
OK, we're arguing semantics. I agree. Tomcat does no encyption/decryption.
However, Tomcat can be secured with SSL without use of a web server.
The links you reference are nice to have. Thanks for those!
--
View this message in context: http://www.nabble.com/Is-this-possibe---mod_jk-%3C%3D%3DSSL%3D%3D%3E-AJP-1.3-tf2776640.html#a7784802
Sent from the Tomcat - User mailing list archive at Nabble.com.
---------------------------------------------------------------------
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org
Re: Is this possibe? mod_jk <==SSL==> AJP/1.3
Posted by Martin Gainty <mg...@hotmail.com>.
yes. Bill's original statement is accurate
if we reference
http://tomcat.apache.org/tomcat-5.5-doc/ssl-howto.html
Option1 (Tomcat container running behind another SSL enabled web-server)
"When running Tomcat primarily as a Servlet/JSP container behind another web server, such as Apache or Microsoft IIS, it is usually necessary to configure the primary web server to handle the SSL connections from users. Typically, this server will negotiate all SSL-related functionality, then pass on any requests destined for the Tomcat container only after decrypting those requests. Likewise, Tomcat will return cleartext responses, that will be encrypted before being returned to the user's browser. In this environment, Tomcat knows that communications between the primary web server and the client are taking place over a secure connection (because your application needs to be able to ask about this), but it does not participate in the encryption or decryption itself"
Option2 certificates please referece this link from Certificate provider Verisign
http://www.verisign.com/ssl/ssl-information-center/how-ssl-security-works/index.html
where the certificate supplies a public key to decrypt information and also supplies a private key used to decipher the key
To quote
"An SSL Certificate consists of a public key and a private key. The public key is used to encrypt information and the private key is used to decipher it"
Tomcat container(s) are not doing the encrypting or decrypting in either scenario-
HTH,
M-
---------------------------------------------------------------------------
This e-mail message (including attachments, if any) is intended for the use of the individual or entity to which it is addressed and may contain information that is privileged, proprietary , confidential and exempt from disclosure. If you are not the intended recipient, you are notified that any dissemination, distribution or copying of this communication is strictly prohibited.
---------------------------------------------------------------------------
Le présent message électronique (y compris les pièces qui y sont annexées, le cas échéant) s'adresse au destinataire indiqué et peut contenir des renseignements de caractère privé ou confidentiel. Si vous n'êtes pas le destinataire de ce document, nous vous signalons qu'il est strictement interdit de le diffuser, de le distribuer ou de le reproduire.
----- Original Message -----
From: "dfelicia" <do...@runbox.com>
To: <us...@tomcat.apache.org>
Sent: Friday, December 08, 2006 11:07 PM
Subject: Re: Is this possibe? mod_jk <==SSL==> AJP/1.3
>
>>Tomcat currently does not support encryption.
> Huh? Sure it does. I think you mean AJP doesn't support encryption.
> --
> View this message in context: http://www.nabble.com/Is-this-possibe---mod_jk-%3C%3D%3DSSL%3D%3D%3E-AJP-1.3-tf2776640.html#a7769280
> Sent from the Tomcat - User mailing list archive at Nabble.com.
>
>
> ---------------------------------------------------------------------
> To start a new topic, e-mail: users@tomcat.apache.org
> To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
> For additional commands, e-mail: users-help@tomcat.apache.org
>
>
Re: Is this possibe? mod_jk <==SSL==> AJP/1.3
Posted by dfelicia <do...@runbox.com>.
>Tomcat currently does not support encryption.
Huh? Sure it does. I think you mean AJP doesn't support encryption.
--
View this message in context: http://www.nabble.com/Is-this-possibe---mod_jk-%3C%3D%3DSSL%3D%3D%3E-AJP-1.3-tf2776640.html#a7769280
Sent from the Tomcat - User mailing list archive at Nabble.com.
---------------------------------------------------------------------
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org
Re: Is this possibe? mod_jk <==SSL==> AJP/1.3
Posted by Bill Barker <wb...@wilshire.com>.
"dfelicia" <do...@runbox.com> wrote in message
news:7763820.post@talk.nabble.com...
>
>>Not true; see
>><http://httpd.apache.org/docs/2.2/mod/mod_proxy_balancer.html>
>
> Interesting. I'll need to look into mod_proxy, further. But what about
> performance? I've not tested it in a long while, but last I tried it was
> slower that mod_jk.
>
> BTW, does Apache 2.2's new mod_proxy_ajp support encryption? Is that the
> answer for me? (Yes, I know I have to RTFM... going there now.)
For the benifit of those searching the archives, what the fine manual says
is that mod_proxy_ajp does not support encryption. The reason is that
Tomcat currently does not support encryption.
> --
> View this message in context:
> http://www.nabble.com/Is-this-possibe---mod_jk-%3C%3D%3DSSL%3D%3D%3E-AJP-1.3-tf2776640.html#a7763820
> Sent from the Tomcat - User mailing list archive at Nabble.com.
>
>
> ---------------------------------------------------------------------
> To start a new topic, e-mail: users@tomcat.apache.org
> To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
> For additional commands, e-mail: users-help@tomcat.apache.org
>
>
---------------------------------------------------------------------
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org
Re: AJP Logging
Posted by Bill Barker <wb...@wilshire.com>.
Depending on whether you are using APR or not, the category is
"org.apache.jk" (not using APR), or "org.apache.coyote.ajp" (using APR).
The exact directive depends of if you are using log4j or Juli.
"Fisher, Mitchell L" <Mi...@unisys.com> wrote in message
news:B05D2E415E8CC94897BB44233D14EE684EE9E8@USTR-EXCH5.na.uis.unisys.com...
I apologize for asking such a basic question here, but how is logging
configured for Tomcat's AJP connector?
My Tomcat Status page shows an error count of one for jk-8009, and I hope
turning logging will show the problem.
-Mitch
--------------------------------------------------------------------------------
> ---------------------------------------------------------------------
> To start a new topic, e-mail: users@tomcat.apache.org
> To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
> For additional commands, e-mail: users-help@tomcat.apache.org
---------------------------------------------------------------------
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org
Re: AJP Logging
Posted by Mark Thomas <ma...@apache.org>.
Fisher, Mitchell L wrote:
> I apologize for asking such a basic question here, but how is logging configured for Tomcat's AJP connector?
>
> My Tomcat Status page shows an error count of one for jk-8009, and I hope turning logging will show the problem.
>
When starting a new thread (ie sending a message to the list about a
new topic) please do not reply to an existing message and change the
subject line. To many of the list archiving services and mail clients
used by list subscribers this makes your new message appear as part
of the old thread. This makes it harder for other users to find
relevant information when searching the lists.
This is known as thread hijacking and is behaviour that is frowned
upon on this list. Frequent offenders will be removed from the list.
It should also be noted that many list subscribers automatically
ignore any messages that hijack another thread.
The correct procedure is to create a new message with a new subject.
This will start a new thread.
Mark
tomcat-user-owner
---------------------------------------------------------------------
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org
AJP Logging
Posted by "Fisher, Mitchell L" <Mi...@unisys.com>.
I apologize for asking such a basic question here, but how is logging configured for Tomcat's AJP connector?
My Tomcat Status page shows an error count of one for jk-8009, and I hope turning logging will show the problem.
-Mitch
Re: Is this possibe? mod_jk <==SSL==> AJP/1.3
Posted by dfelicia <do...@runbox.com>.
>Not true; see <http://httpd.apache.org/docs/2.2/mod/mod_proxy_balancer.html>
Interesting. I'll need to look into mod_proxy, further. But what about
performance? I've not tested it in a long while, but last I tried it was
slower that mod_jk.
BTW, does Apache 2.2's new mod_proxy_ajp support encryption? Is that the
answer for me? (Yes, I know I have to RTFM... going there now.)
--
View this message in context: http://www.nabble.com/Is-this-possibe---mod_jk-%3C%3D%3DSSL%3D%3D%3E-AJP-1.3-tf2776640.html#a7763820
Sent from the Tomcat - User mailing list archive at Nabble.com.
---------------------------------------------------------------------
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org