Re: can SSL an non-SSL run at the same time??

2001-04-30 Thread Craig R. McClanahan



On Thu, 5 Apr 2001, Milt Epstein wrote:

 On Thu, 5 Apr 2001, Alvin Yap wrote:
 
  I running Tomcat as a standalone using SSL.
  What i'm hoping to do is that one context with non-SSL and the other
  context is with SSL.
 
 Well, that helps clarify the question.  Unfortunately, I don't have an
 answer for you (i.e. I don't know) -- but perhaps someone else does.
 This is certainly a very reasonable/desirable capability to have, so
 if it's not available, it would be nice if it were added.  FWIW, I'm
 pretty sure you can do what you want with Apache with mod_ssl (which
 is what I'm using -- but I haven't tried doing that yet).
 
 

The simplest thing to do is set up the *same* webapp(s) to be accessible
via both SSL and non-SSL.  All it takes to do this is to uncomment the SSL
connector entry in conf/server.xml and customize the appropriate
properties.

If you really want the sets of web apps available via SSL and non-SSL
connections to be separate, that can be done as well -- by using more than
one Service element in your web.xml file, like this:

Server port=8005 ...


  Service name=SSL Service
Connector ... define the SSL connector ... /
Engine ...
  Host ...  !-- One per virtual host --
Context .../!-- One per web app --
  /Host
/Engine
  /Service

  Service name=Non-SSL Service
Connector ... define the non-SSL connector ... /
Engine ...
  Host ...  !-- One per virtual host --
Context .../!-- One per web app --
  /Host
/Engine
  /Service

/Server

The details for the properties of these elements can be found in the
Tomcat 4.0 configuration information, at:

http://localhost:8080/docs/config

Craig McClanahan




Re: can SSL an non-SSL run at the same time??

2001-04-06 Thread Pae Choi

Gomez,

I know you were involved in mod_jk at least for apache 2.0 from 1.3.x.
Have you built the mod_jk with apache v1.3.17 and v1.3.19 with "EAPI"
option. It seems like the option, EAPI", is completely removed from both
versions. Then do we have any info regarding on the reasons and effects
on this change, "EAPI" from 1.3.14 to later versions. Thanks


Pae



 I running Tomcat as a standalone using SSL.
 What i'm hoping to do is that one context with non-SSL and the other
 context is with SSL.

Well, that helps clarify the question.  Unfortunately, I don't have an
answer for you (i.e. I don't know) -- but perhaps someone else does.
This is certainly a very reasonable/desirable capability to have, so
if it's not available, it would be nice if it were added.  FWIW, I'm
pretty sure you can do what you want with Apache with mod_ssl (which
is what I'm using -- but I haven't tried doing that yet).

I strongly recommand you to use mod_jk to handle this situation.

1) native http connector are still not as secure as apache could be

2) handling SSL / NON-SSL via mod_jk (and mod_ssl) in Apache is very
   easy, and works fine (used in my prods servers for months)




can SSL an non-SSL run at the same time??

2001-04-05 Thread Alvin Yap

I have setup the Tomcat 4.0b1 running with SSL.  Is it possible to run
non-SSL in a different context??  It seems to me that whenever i turn on
SSL all context will be listening on SSL port.

Alvin




Re: can SSL an non-SSL run at the same time??

2001-04-05 Thread Paul Ramos

Check out http://www.apache-ssl.org/#What_is_Apache-SSLlook for "I want to run secure and non-secure server on the same machine. Is that possible?".

From: Alvin Yap <[EMAIL PROTECTED]>
Reply-To: [EMAIL PROTECTED] 
To: "[EMAIL PROTECTED]" <[EMAIL PROTECTED]>
Subject: can SSL an non-SSL run at the same time?? 
Date: Thu, 05 Apr 2001 09:47:48 -0400 
MIME-Version: 1.0 
Received: from [64.208.42.41] by hotmail.com (3.2) with ESMTP id MHotMailBC95C205007C400431D340D02A2911910; Thu Apr 05 06:45:41 2001 
Received: (qmail 61753 invoked by uid 500); 5 Apr 2001 13:45:05 - 
Received: (qmail 61723 invoked from network); 5 Apr 2001 13:45:05 - 
Received: from tomts8.bellnexxia.net (HELO tomts8-srv.bellnexxia.net) (209.226.175.52) by h31.sny.collab.net with SMTP; 5 Apr 2001 13:45:05 - 
Received: from sympatico.ca ([64.229.82.142]) by tomts8-srv.bellnexxia.net (InterMail vM.4.01.03.16 201-229-121-116-20010115) with ESMTP id [EMAIL PROTECTED] for <[EMAIL PROTECTED]>; Thu, 5 Apr 2001 09:44:45 -0400 
From tomcat-user-return-30014-pauldramos Thu Apr 05 06:46:53 2001 
Mailing-List: contact [EMAIL PROTECTED]; run by ezmlm 
Precedence: bulk 
list-help: <mailto:[EMAIL PROTECTED]>
list-unsubscribe: <mailto:[EMAIL PROTECTED]>
list-post: <mailto:[EMAIL PROTECTED]>
Delivered-To: mailing list [EMAIL PROTECTED] 
Message-ID: [EMAIL PROTECTED] 
X-Mailer: Mozilla 4.75 [en] (Windows NT 5.0; U) 
X-Accept-Language: en 
X-Spam-Rating: h31.sny.collab.net 1.6.2 0/1000/N 

I have setup the Tomcat 4.0b1 running with SSL. Is it possible to run 
non-SSL in a different context?? It seems to me that whenever i turn on 
SSL all context will be listening on SSL port. 

Alvin 

Get your FREE download of MSN Explorer at http://explorer.msn.com


Re: can SSL an non-SSL run at the same time??

2001-04-05 Thread Paul Ramos



Check out http://www.apache-ssl.org/#What_is_Apache-SSLlook for "I want to run secure and non-secure server on the same machine. Is that possible?".



From: Alvin Yap <[EMAIL PROTECTED]>

Reply-To: [EMAIL PROTECTED] 

To: "[EMAIL PROTECTED]" <[EMAIL PROTECTED]>

Subject: can SSL an non-SSL run at the same time?? 

Date: Thu, 05 Apr 2001 09:47:48 -0400 

MIME-Version: 1.0 

Received: from [64.208.42.41] by hotmail.com (3.2) with ESMTP id MHotMailBC95C205007C400431D340D02A2911910; Thu Apr 05 06:45:41 2001 

Received: (qmail 61753 invoked by uid 500); 5 Apr 2001 13:45:05 - 

Received: (qmail 61723 invoked from network); 5 Apr 2001 13:45:05 - 

Received: from tomts8.bellnexxia.net (HELO tomts8-srv.bellnexxia.net) (209.226.175.52) by h31.sny.collab.net with SMTP; 5 Apr 2001 13:45:05 - 

Received: from sympatico.ca ([64.229.82.142]) by tomts8-srv.bellnexxia.net (InterMail vM.4.01.03.16 201-229-121-116-20010115) with ESMTP id [EMAIL PROTECTED] for <[EMAIL PROTECTED]>; Thu, 5 Apr 2001 09:44:45 -0400 

From tomcat-user-return-30014-pauldramos Thu Apr 05 06:46:53 2001 

Mailing-List: contact [EMAIL PROTECTED]; run by ezmlm 

Precedence: bulk 

list-help: <mailto:[EMAIL PROTECTED]>

list-unsubscribe: <mailto:[EMAIL PROTECTED]>

list-post: <mailto:[EMAIL PROTECTED]>

Delivered-To: mailing list [EMAIL PROTECTED] 

Message-ID: [EMAIL PROTECTED] 

X-Mailer: Mozilla 4.75 [en] (Windows NT 5.0; U) 

X-Accept-Language: en 

X-Spam-Rating: h31.sny.collab.net 1.6.2 0/1000/N 



I have setup the Tomcat 4.0b1 running with SSL. Is it possible to run 

non-SSL in a different context?? It seems to me that whenever i turn on 

SSL all context will be listening on SSL port. 



Alvin 



Get your FREE download of MSN Explorer at http://explorer.msn.com


Re: can SSL an non-SSL run at the same time??

2001-04-05 Thread Alvin Yap

I running Tomcat as a standalone using SSL.
What i'm hoping to do is that one context with non-SSL and the other context
is with SSL.


Alvin
Milt Epstein wrote:

 On Thu, 5 Apr 2001, Paul Ramos wrote:

  Check out http://www.apache-ssl.org/#What_is_Apache-SSL look for "I
  want to run secure and non-secure server on the same machine. Is
  that possible?".

 If I understand right, there are (at least) two ways to run SSL with
 Apache -- one is Apache-SSL and one is regular Apache with mod_ssl.
 Sounds like the above is only for Apache-SSL.  Don't know what the
 previous poster is using.

 And in fact, it's also possible to run Tomcat standalone with SSL.

  From: Alvin Yap
  Reply-To: [EMAIL PROTECTED]
  To: "[EMAIL PROTECTED]"
  Subject: can SSL an non-SSL run at the same time??
  Date: Thu, 05 Apr 2001 09:47:48 -0400
 
  I have setup the Tomcat 4.0b1 running with SSL. Is it possible to run
  non-SSL in a different context?? It seems to me that whenever i turn on
  SSL all context will be listening on SSL port.
 

 Milt Epstein
 Research Programmer
 Software/Systems Development Group
 Computing and Communications Services Office (CCSO)
 University of Illinois at Urbana-Champaign (UIUC)
 [EMAIL PROTECTED]




Re: can SSL an non-SSL run at the same time??

2001-04-05 Thread Milt Epstein

On Thu, 5 Apr 2001, Alvin Yap wrote:

 I running Tomcat as a standalone using SSL.
 What i'm hoping to do is that one context with non-SSL and the other
 context is with SSL.

Well, that helps clarify the question.  Unfortunately, I don't have an
answer for you (i.e. I don't know) -- but perhaps someone else does.
This is certainly a very reasonable/desirable capability to have, so
if it's not available, it would be nice if it were added.  FWIW, I'm
pretty sure you can do what you want with Apache with mod_ssl (which
is what I'm using -- but I haven't tried doing that yet).


 Milt Epstein wrote:
 
  On Thu, 5 Apr 2001, Paul Ramos wrote:
 
   Check out http://www.apache-ssl.org/#What_is_Apache-SSL look for "I
   want to run secure and non-secure server on the same machine. Is
   that possible?".
 
  If I understand right, there are (at least) two ways to run SSL with
  Apache -- one is Apache-SSL and one is regular Apache with mod_ssl.
  Sounds like the above is only for Apache-SSL.  Don't know what the
  previous poster is using.
 
  And in fact, it's also possible to run Tomcat standalone with SSL.
 
   From: Alvin Yap
   Reply-To: [EMAIL PROTECTED]
   To: "[EMAIL PROTECTED]"
   Subject: can SSL an non-SSL run at the same time??
   Date: Thu, 05 Apr 2001 09:47:48 -0400
  
   I have setup the Tomcat 4.0b1 running with SSL. Is it possible to run
   non-SSL in a different context?? It seems to me that whenever i turn on
   SSL all context will be listening on SSL port.
  
 
 

Milt Epstein
Research Programmer
Software/Systems Development Group
Computing and Communications Services Office (CCSO)
University of Illinois at Urbana-Champaign (UIUC)
[EMAIL PROTECTED]




Re: can SSL an non-SSL run at the same time??

2001-04-05 Thread Alvin Yap

Thanks Milt.  I'll give it a try using Apache Web Server.

Alvin

Milt Epstein wrote:

 On Thu, 5 Apr 2001, Alvin Yap wrote:

  I running Tomcat as a standalone using SSL.
  What i'm hoping to do is that one context with non-SSL and the other
  context is with SSL.

 Well, that helps clarify the question.  Unfortunately, I don't have an
 answer for you (i.e. I don't know) -- but perhaps someone else does.
 This is certainly a very reasonable/desirable capability to have, so
 if it's not available, it would be nice if it were added.  FWIW, I'm
 pretty sure you can do what you want with Apache with mod_ssl (which
 is what I'm using -- but I haven't tried doing that yet).

  Milt Epstein wrote:
 
   On Thu, 5 Apr 2001, Paul Ramos wrote:
  
Check out http://www.apache-ssl.org/#What_is_Apache-SSL look for "I
want to run secure and non-secure server on the same machine. Is
that possible?".
  
   If I understand right, there are (at least) two ways to run SSL with
   Apache -- one is Apache-SSL and one is regular Apache with mod_ssl.
   Sounds like the above is only for Apache-SSL.  Don't know what the
   previous poster is using.
  
   And in fact, it's also possible to run Tomcat standalone with SSL.
  
From: Alvin Yap
Reply-To: [EMAIL PROTECTED]
To: "[EMAIL PROTECTED]"
Subject: can SSL an non-SSL run at the same time??
Date: Thu, 05 Apr 2001 09:47:48 -0400
   
I have setup the Tomcat 4.0b1 running with SSL. Is it possible to run
non-SSL in a different context?? It seems to me that whenever i turn on
SSL all context will be listening on SSL port.
   
  
 

 Milt Epstein
 Research Programmer
 Software/Systems Development Group
 Computing and Communications Services Office (CCSO)
 University of Illinois at Urbana-Champaign (UIUC)
 [EMAIL PROTECTED]




RE: can SSL an non-SSL run at the same time??

2001-04-05 Thread GOMEZ Henri

 I running Tomcat as a standalone using SSL.
 What i'm hoping to do is that one context with non-SSL and the other
 context is with SSL.

Well, that helps clarify the question.  Unfortunately, I don't have an
answer for you (i.e. I don't know) -- but perhaps someone else does.
This is certainly a very reasonable/desirable capability to have, so
if it's not available, it would be nice if it were added.  FWIW, I'm
pretty sure you can do what you want with Apache with mod_ssl (which
is what I'm using -- but I haven't tried doing that yet).

I strongly recommand you to use mod_jk to handle this situation.

1) native http connector are still not as secure as apache could be

2) handling SSL / NON-SSL via mod_jk (and mod_ssl) in Apache is very
   easy, and works fine (used in my prods servers for months)