Re: Encryption and weblogic module

2004-04-16 Thread Daniel Lopez
But that module is for when Apache has been compiled with SSL (EAPI patches) does not provide SSL support. > Weblogic used to provide an ssl version of the mod_wl module, I think it > was named mod_wl_ssl. Obtaining the correct mod_wl_ssl may be dependent > on which version of weblogic and apac

RE: Encryption and weblogic module

2004-04-16 Thread David Marshall
Firewall ---> Weblogic only port 443 mod_wl_ssl port is configurable David -Original Message- From: Daniel Lopez [mailto:[EMAIL PROTECTED] Sent: Friday, April 16, 2004 6:48 AM To: [EMAIL PROTECTED] Subject: Re: Encryption and web

Re: Encryption and weblogic module

2004-04-16 Thread Daniel Lopez
client (a)-> Apache -(b)> Weblogic If the client connects to Apache using SSL, (a) will be encrypted but (b) will not (unless you can configure mod_wl to use SSL, which I dont believe you can). the assumption is that (b) is occurring over a private, trusted network. If you need

Re: Encryption and weblogic module

2004-04-16 Thread Matt Stevenson
AFAIK the apache-weblogic connection isn't encrypted. And yes if encrypted it would be weblogic modules responsibilty. You can check with a tcpdump (use ethereal on Linux/Unix). You could use Stunnel to create an SSL tunnel between the apache and weblogic boxes. How well this works I don't know. R