Re: Question about TLS/SSL setup and SSLHostConfig or not

2021-03-02 Thread Alex
On 02.03.21 23:50, Peter Kreuser wrote: Alex, Am 02.03.2021 um 23:19 schrieb Alex : Hi. On 02.03.21 23:14, John Larsen wrote: I usually let the apache webserver or nginx handle the SSL while proxying to the tomcat. Unless you need some really fancy rewriting or caching, Tomcat is

Re: Question about TLS/SSL setup and SSLHostConfig or not

2021-03-02 Thread Peter Kreuser
Alex, > Am 02.03.2021 um 23:19 schrieb Alex : > > Hi. > >> On 02.03.21 23:14, John Larsen wrote: >> I usually let the apache webserver or nginx handle the SSL while proxying >> to the tomcat. Unless you need some really fancy rewriting or caching, Tomcat is absolutely capable to handle

Re: Question about TLS/SSL setup and SSLHostConfig or not

2021-03-02 Thread Alex
Hi. On 02.03.21 23:14, John Larsen wrote: I usually let the apache webserver or nginx handle the SSL while proxying to the tomcat. To use tomcat's built in server you'll need to import the SSL certificate into the keystore via your jdk. Fully agree, but sometimes it is requierd that the

Re: Question about TLS/SSL setup and SSLHostConfig or not

2021-03-02 Thread John Larsen
I usually let the apache webserver or nginx handle the SSL while proxying to the tomcat. To use tomcat's built in server you'll need to import the SSL certificate into the keystore via your jdk. John Larsen On Tue, Mar 2, 2021 at 3:06 PM Alex wrote: > Hi. > > I try to make a "good" tomcat

Question about TLS/SSL setup and SSLHostConfig or not

2021-03-02 Thread Alex
Hi. I try to make a "good" tomcat config and read the docs. Now in the Connector doc is the following statement. http://tomcat.apache.org/tomcat-9.0-doc/config/http.html#SSL_Support http://tomcat.apache.org/tomcat-10.0-doc/config/http.html#SSL_Support Each secure connector must define at