Re: apache-tomcat ssl doc download error in IE

2004-02-10 Thread Mark W. Webb
This fix will only work if you have apache using the mod_headers 
module.  I do not have that module installed on my version of apache, so 
I am not sure if there is any other work around.  Do you have any other 
ideas?  I am quickly running out of ideas myself.
thank you.

Daniel wrote:

Hi,

I actually just got this working and the answer is unbelievably bizarre.

It all sorta boiled down to the Pragma header.  I can't set the pragma
header in my servlet and must do it in the Apache httpd.conf like this:
   Header append Pragma blah
And blah could be anything and would still work, it's just the fact
that it's set in the Apache httpd.conf!  Weird, this isn't scientific, I
must be missing something. :)
Here's the combo I got it working with:

Pragma: no-cache, blah
Cache-Control: private
Content-Length: sizeof(stream)
Content-disposition: attachment; filename=doc.pdf
Regards,
Daniel
On Thu, 5 Feb 2004, Mark W. Webb wrote:

 

I am seeing a very similar problem with Tomcat 4.1.24 and Apache over
SSL on Solaris 9.  I am using Tomcat4.1.24, JDK 1.4.2 Apache
2.0.48(mod_ssl, mod_jk), OpenSSL 0.9.7c.  Everything compiled from
source except JDK.
   

Hi,

I'm really stumped and hope someone can provide insight :(

We got a tomcat server connected behind a an apache web server via mod_jk.

when running without ssl, a user submits a form and is able to
retrieve a pdf document (they can save or open it) using IE6.  But over
ssl they would get this error:
Internet Explorer cannot download doc.pdf from myhost.com.
Internet EXplorer was not able to open this Internet site. The requested
site is either unavailable or cannnot be found. Please try again later.
This doesn't happen with Mozilla and it would work as expected.

Thing is, we've got a *solution* for this when using mod_python and
mod_perl...just not with Java/Tomcat.  The solution for those were to set
special http headers so IE can interpret things correctly:
- Pragma = 'nocache'
- Expires = 'now'
- Cache-Control = 'private'
- Content-Length = sizeof(stream)
- Content-disposition = 'attachment; filename=doc.pdf'
This was done by a co-worker of mine and it worked.  I later saw something
about setting Cache-Control = public cuz IE won't save private stuff.
But even when I explicity setHeader(Cache-Control, public) I still see
Cache-Control = private, public.
So I have 2 questions:

1. Does anyone know why there are two values even when I explicity call
 setHeader(..) for the Cache-Control?  Is Tomcat silently setting this?
 The source doesn't seem to have that though... :(
2. Has anyone run into this and solved it?  I'd be much more interested in
 this answer :))
We're using:
- Tomcat 4.0.6, via mod_jk to Apache 1.3.x with mod_ssl, on Linux.
- Turbine 2.3 framework
- JDK 1.4.x.
TIA,
Daniel
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
 

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
   

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


apache-tomcat ssl doc download error in IE

2004-02-05 Thread Daniel

Hi,

I'm really stumped and hope someone can provide insight :(

We got a tomcat server connected behind a an apache web server via mod_jk.

when running without ssl, a user submits a form and is able to
retrieve a pdf document (they can save or open it) using IE6.  But over
ssl they would get this error:

Internet Explorer cannot download doc.pdf from myhost.com.
 Internet EXplorer was not able to open this Internet site. The requested
 site is either unavailable or cannnot be found. Please try again later.

This doesn't happen with Mozilla and it would work as expected.

Thing is, we've got a *solution* for this when using mod_python and
mod_perl...just not with Java/Tomcat.  The solution for those were to set
special http headers so IE can interpret things correctly:

- Pragma = 'nocache'
- Expires = 'now'
- Cache-Control = 'private'
- Content-Length = sizeof(stream)
- Content-disposition = 'attachment; filename=doc.pdf'

This was done by a co-worker of mine and it worked.  I later saw something
about setting Cache-Control = public cuz IE won't save private stuff.
But even when I explicity setHeader(Cache-Control, public) I still see
Cache-Control = private, public.

So I have 2 questions:

1. Does anyone know why there are two values even when I explicity call
   setHeader(..) for the Cache-Control?  Is Tomcat silently setting this?
   The source doesn't seem to have that though... :(

2. Has anyone run into this and solved it?  I'd be much more interested in
   this answer :))

We're using:
- Tomcat 4.0.6, via mod_jk to Apache 1.3.x with mod_ssl, on Linux.
- Turbine 2.3 framework
- JDK 1.4.x.

TIA,
Daniel

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: apache-tomcat ssl doc download error in IE

2004-02-05 Thread Mark W. Webb
I am seeing a very similar problem with Tomcat 4.1.24 and Apache over 
SSL on Solaris 9.  I am using Tomcat4.1.24, JDK 1.4.2 Apache 
2.0.48(mod_ssl, mod_jk), OpenSSL 0.9.7c.  Everything compiled from 
source except JDK.

Hi,

I'm really stumped and hope someone can provide insight :(

We got a tomcat server connected behind a an apache web server via mod_jk.

when running without ssl, a user submits a form and is able to
retrieve a pdf document (they can save or open it) using IE6.  But over
ssl they would get this error:
Internet Explorer cannot download doc.pdf from myhost.com.
Internet EXplorer was not able to open this Internet site. The requested
site is either unavailable or cannnot be found. Please try again later.
This doesn't happen with Mozilla and it would work as expected.

Thing is, we've got a *solution* for this when using mod_python and
mod_perl...just not with Java/Tomcat.  The solution for those were to set
special http headers so IE can interpret things correctly:
- Pragma = 'nocache'
- Expires = 'now'
- Cache-Control = 'private'
- Content-Length = sizeof(stream)
- Content-disposition = 'attachment; filename=doc.pdf'
This was done by a co-worker of mine and it worked.  I later saw something
about setting Cache-Control = public cuz IE won't save private stuff.
But even when I explicity setHeader(Cache-Control, public) I still see
Cache-Control = private, public.
So I have 2 questions:

1. Does anyone know why there are two values even when I explicity call
  setHeader(..) for the Cache-Control?  Is Tomcat silently setting this?
  The source doesn't seem to have that though... :(
2. Has anyone run into this and solved it?  I'd be much more interested in
  this answer :))
We're using:
- Tomcat 4.0.6, via mod_jk to Apache 1.3.x with mod_ssl, on Linux.
- Turbine 2.3 framework
- JDK 1.4.x.
TIA,
Daniel
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
 



-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


Re: apache-tomcat ssl doc download error in IE

2004-02-05 Thread Daniel

Hi,

I actually just got this working and the answer is unbelievably bizarre.

It all sorta boiled down to the Pragma header.  I can't set the pragma
header in my servlet and must do it in the Apache httpd.conf like this:
Header append Pragma blah

And blah could be anything and would still work, it's just the fact
that it's set in the Apache httpd.conf!  Weird, this isn't scientific, I
must be missing something. :)

Here's the combo I got it working with:

Pragma: no-cache, blah
Cache-Control: private
Content-Length: sizeof(stream)
Content-disposition: attachment; filename=doc.pdf

Regards,
Daniel

On Thu, 5 Feb 2004, Mark W. Webb wrote:

 I am seeing a very similar problem with Tomcat 4.1.24 and Apache over
 SSL on Solaris 9.  I am using Tomcat4.1.24, JDK 1.4.2 Apache
 2.0.48(mod_ssl, mod_jk), OpenSSL 0.9.7c.  Everything compiled from
 source except JDK.

 Hi,
 
 I'm really stumped and hope someone can provide insight :(
 
 We got a tomcat server connected behind a an apache web server via mod_jk.
 
 when running without ssl, a user submits a form and is able to
 retrieve a pdf document (they can save or open it) using IE6.  But over
 ssl they would get this error:
 
 Internet Explorer cannot download doc.pdf from myhost.com.
  Internet EXplorer was not able to open this Internet site. The requested
  site is either unavailable or cannnot be found. Please try again later.
 
 This doesn't happen with Mozilla and it would work as expected.
 
 Thing is, we've got a *solution* for this when using mod_python and
 mod_perl...just not with Java/Tomcat.  The solution for those were to set
 special http headers so IE can interpret things correctly:
 
 - Pragma = 'nocache'
 - Expires = 'now'
 - Cache-Control = 'private'
 - Content-Length = sizeof(stream)
 - Content-disposition = 'attachment; filename=doc.pdf'
 
 This was done by a co-worker of mine and it worked.  I later saw something
 about setting Cache-Control = public cuz IE won't save private stuff.
 But even when I explicity setHeader(Cache-Control, public) I still see
 Cache-Control = private, public.
 
 So I have 2 questions:
 
 1. Does anyone know why there are two values even when I explicity call
setHeader(..) for the Cache-Control?  Is Tomcat silently setting this?
The source doesn't seem to have that though... :(
 
 2. Has anyone run into this and solved it?  I'd be much more interested in
this answer :))
 
 We're using:
 - Tomcat 4.0.6, via mod_jk to Apache 1.3.x with mod_ssl, on Linux.
 - Turbine 2.3 framework
 - JDK 1.4.x.
 
 TIA,
 Daniel
 
 -
 To unsubscribe, e-mail: [EMAIL PROTECTED]
 For additional commands, e-mail: [EMAIL PROTECTED]
 
 


 -
 To unsubscribe, e-mail: [EMAIL PROTECTED]
 For additional commands, e-mail: [EMAIL PROTECTED]


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Apache/Tomcat/SSL vs. Tomcat/SSL

2004-02-04 Thread Jeremy Boyd
Hi all-

I searched through the archives to see if this question has already been =
asked and answered.  I did not find anything, but forgive me if I missed =
the answer.

I am wondering what the general consensus is regarding SSL performance =
in both Apache and Tomcat.  I am interested in deploying Tomcat and my =
application requires SSL.  I am debating whether I should access Tomcat =
through the AJP connector using Apache, thus allowing Apache to handle =
all of the SSL traffic or whether it is better to deploy Tomcat in =
standalone mode and allow Tomcat to fulfill requests and handle the SSL =
traffic.

My thought is that since Apache is written in C it may be more efficient =
to have Apache handle the SSL.  However, I am not sure if the overhead =
of the connector would negate any performance benefits gained from =
having Apache handle the SSL rather than Tomcat.  If performance is the =
same or only marginally better with Apache then I am not sure if the =
added complexity of having Apache in the equation is warranted.  I have =
not benchmarked to see if there is actually a performance difference.  =
Does anyone have an opinion on this or any benchmarks they could share?

Thanks,
Jeremy
___
Information Systems Manager
Document Systems, Inc.
20501 South Avalon Blvd
Carson, CA  90746

Phone: 800-649-1362 ext 241
FAX: 800-564-1362

e-mail: [EMAIL PROTECTED]
web: www.docmagic.com=20

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: Apache/Tomcat/SSL vs. Tomcat/SSL

2004-02-04 Thread David Wall
 My thought is that since Apache is written in C it may be more efficient =
 to have Apache handle the SSL.  However, I am not sure if the overhead =
 of the connector would negate any performance benefits gained from =
 having Apache handle the SSL rather than Tomcat.  If performance is the =
 same or only marginally better with Apache then I am not sure if the =
 added complexity of having Apache in the equation is warranted.  I have =
 not benchmarked to see if there is actually a performance difference.  =
 Does anyone have an opinion on this or any benchmarks they could share?

Great question.  I've got the same consideration, but without a way to drive
lots of SSL transactions from lots of different clients, it's hard to know.
SSL has a lot of overhead in setup, but there's some SSL persistence that
gives you a benefit for frequent requests that avoid the re-negotations.
But I know that consumes memory, so there's no doubt issues related to the
number of different concurrent clients using SSL at the same time.

Also, OpenSSL (why it's never reached the 1.0 level I can't say since it's
been in production for many years!) is probably more mature than the JSSE.
And while C code would surely be faster, the server VMs supposedly do a
great job on code that's constantly executed as would be the case for the
SSL java code.  And surely there are real costs associated with the memory
and thread/process overhead of running HTTPD on the same computer.  Of
course, there are some security advantages if the HTTPD runs on one machine
with a public IP addr and TOMCAT on an other server using a private IP addr.

And the Apache http engine is certainly more mature than Tomcat's, but I
don't have any benchmarks or other info to tell me if it's really that much
faster, or if either is more secure (after all, Java typically is less
vulerable than C code).

We're creating an office edition of our flagship Signed  Secured enterprise
software, and we're trying to simplify systems dramatically, so we'd like to
get rid of Apache just for the simplicity of it all.  We're even going to
buck the no user threads warning for servlet containers since Tomcat
allows them and it will make our system even simpler by removing the need
for a couple of standalone Java applications and a few batch java
applications.

I hope others can comment on real stats they've seen.

Thanks,
David


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



RE: Apache + tomcat +ssl

2004-01-22 Thread Chakravarthy, Sundar

Edit apache's httpd.conf and ssl.conf to setup Virtual Hosts

Edit Tomcat's server.xml to so that the Host name matches the Virtual
Host servername inside httpd.conf and ssl.conf. 

http://jakarta.apache.org/tomcat/tomcat-4.1-doc/config/jk.html




-Original Message-
From: Omkar Joshi [mailto:[EMAIL PROTECTED] 
Sent: Tuesday, January 13, 2004 6:41 AM
To: [EMAIL PROTECTED]
Subject: Apache + tomcat +ssl

can u give me code, how exactly you specify this .../appserver/*





Date: Tue, 13 Jan 2004 10:35:08 +0100
From: Spam [EMAIL PROTECTED]
Subject: Apache + tomcat +ssl
Content-Type: text/plain; charset=ISO-8859-1; format=flowed

Hi,

It should not depend on the port you use to connect to apache.
Both http://myserver.com/index.jsp and https://myserver.com/index.jsp
should have the same result with no specific
configuration.

I've configured mod_jk to redirect all .../appserver/*  to tomcat.
Then whatever I use http://localhost/appserver/* or
https://localhost/appserver, it's ok.

Regards.

Johann DUPUIS

Omkar Joshi wrote:

Hi,

I have apache on linux 9 with ssl set up.

also i have set up tomcat amd mod_jk for apache to redirect all jsp to 
tomcat

now as port 80 is open ,

http://myserver.com:8080/index.jsp

http://myserver.com/index.jsp

works fine, apache send jsp to tomcat engine

but as apache has ssl 443 , opened on the firewall i want

https://myserver.com/index.jsp to work.

let me know what setting required

_
Meet a mate. Find a soulmate. http://www.msn.co.in/Romance/ Or just
chat a 
while.


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]




-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]







_
Gujarat Kite Fest at http://go.msnserver.com/IN/40247.asp 
www.gujaratkitefest.com


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Apache + tomcat +ssl

2004-01-15 Thread Omkar Joshi
Hi,

Thanks a lot for all the help, it is working fine now.

I added *.jsp and *.gif in Jkmount, as ony '*'  redirects everything to 
tomcat.

Thanks again

_
Get head-hunted by 10,000 recruiters. http://go.msnserver.com/IN/35984.asp 
Post your CV on naukri.com today.

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


Re: Apache + tomcat +ssl

2004-01-14 Thread Spam
I guess if you put the JkMount inside virtual host 172.16.16.10:80 , 
the JkMount is only valid for port 80.
Put JkMount outside any virtual host ... should make it valid for all 
ports (included port 443).
Whatever it looks around httpd.conf  misconfiguration.

Try this:

  IfModule mod_jk.c
  JkLogLeveldebug
  JkWorkersFile   C:/usr/TMS/AppServer/Resource/workers.properties
  JkLogFileC:/usr/TMS/AppServer/logs/mod_jk.log
  JkMount/appserver/* ajp13
  /IfModule
   NameVirtualHost 172.16.16.10:80
   virtual host 172.16.16.10:80
   servername ...
   .
   /virtualhost
rather than:

   NameVirtualHost 172.16.16.10:80
   virtual host 172.16.16.10:80
   servername ...
   .
   JkMount ...
   /virtualhost


Omkar Joshi wrote:

Yes,

I successfully reach static pages (not redirected to tomcat, served
directly by apache) from https://myserver.com/, no problem with that
also http://myserver.com/index.jspworks fine,

problem with https://myserver.com/index.jsp

error :

Object not found!
The requested URL was not found on this server. If you entered the URL 
manually please check your spelling and try again.
If you think this is a server error, please contact the webmaster
Error 404

configuration:
--
httpd.conf
NameVirtualHost 172.16.16.10:80
virtual host 172.16.16.10:80
servername ...
.
JkMount ...
/virtualhost
All settings according to

http://johnturner.com/howto/apache2-tomcat4127-jk-rh9-howto.html

_
Get head-hunted by 10,000 recruiters. 
http://go.msnserver.com/IN/35984.asp Post your CV on naukri.com today.

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


Apache + tomcat +ssl

2004-01-14 Thread Omkar Joshi
Ok,

https://myserver.com/index.jsp WORKS  am able to browse thru all data

only problem is it is not showing all the images which i have stored under

tomcats web application.

_
Send DD, pay no commission. 
http://server1.msn.co.in/msnleads/suvidha/dec03.asp?type=hottag Click here.

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


Re: Apache + tomcat +ssl

2004-01-14 Thread Spam
You don't say if the displaying of images problem is related to port 80,
8080 or 443 (or any combination of these ports).
I guess it's ok for port 8080.
Try to display one image by using the full URL, example:
   https://localhost/appserver/myapp/img/viewmag.gif
and
   http://localhost/appserver/myapp/img/viewmag.gif
You should get an error, which one? page 404, 500 (from apache), 500
(from tomcat)?
Again, first thing to know is if it's a problem related to apache+mod_jk
or tomcat problem.
Have a look on logs and forward apache / mod_jk / tomcat logs related to
these attempts.
Without this information, I would try:
   - check if your JkMount points out a '*' and not a '*.jsp'
   - check if you have configured no security restrictions inside
apache configuration
johann DUPUIS

Omkar Joshi wrote:

Ok,

https://myserver.com/index.jsp WORKS  am able to browse thru all 
data

only problem is it is not showing all the images which i have stored 
under

tomcats web application.

_
Send DD, pay no commission. 
http://server1.msn.co.in/msnleads/suvidha/dec03.asp?type=hottag Click 
here.

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]




-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


Apache + tomcat +ssl

2004-01-13 Thread Omkar Joshi
Hi,

I have apache on linux 9 with ssl set up.

also i have set up tomcat amd mod_jk for apache to redirect all jsp to 
tomcat

now as port 80 is open ,

http://myserver.com:8080/index.jsp

http://myserver.com/index.jsp

works fine, apache send jsp to tomcat engine

but as apache has ssl 443 , opened on the firewall i want

https://myserver.com/index.jsp to work.

let me know what setting required

_
Meet a mate. Find a soulmate. http://www.msn.co.in/Romance/ Or just chat a 
while.

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


Re: Apache + tomcat +ssl

2004-01-13 Thread Spam
Hi,

It should not depend on the port you use to connect to apache.
Both http://myserver.com/index.jsp and https://myserver.com/index.jsp 
should have the same result with no specific
configuration.

I've configured mod_jk to redirect all .../appserver/*  to tomcat.
Then whatever I use http://localhost/appserver/* or 
https://localhost/appserver, it's ok.

Regards.

Johann DUPUIS

Omkar Joshi wrote:

Hi,

I have apache on linux 9 with ssl set up.

also i have set up tomcat amd mod_jk for apache to redirect all jsp to 
tomcat

now as port 80 is open ,

http://myserver.com:8080/index.jsp

http://myserver.com/index.jsp

works fine, apache send jsp to tomcat engine

but as apache has ssl 443 , opened on the firewall i want

https://myserver.com/index.jsp to work.

let me know what setting required

_
Meet a mate. Find a soulmate. http://www.msn.co.in/Romance/ Or just 
chat a while.

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


Apache + tomcat +ssl

2004-01-13 Thread Omkar Joshi
can u give me code, how exactly you specify this .../appserver/*





Date: Tue, 13 Jan 2004 10:35:08 +0100
From: Spam [EMAIL PROTECTED]
Subject: Apache + tomcat +ssl
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Hi,

It should not depend on the port you use to connect to apache.
Both http://myserver.com/index.jsp and https://myserver.com/index.jsp
should have the same result with no specific
configuration.
I've configured mod_jk to redirect all .../appserver/*  to tomcat.
Then whatever I use http://localhost/appserver/* or
https://localhost/appserver, it's ok.
Regards.

Johann DUPUIS

Omkar Joshi wrote:

Hi,

I have apache on linux 9 with ssl set up.

also i have set up tomcat amd mod_jk for apache to redirect all jsp to 
tomcat

now as port 80 is open ,

http://myserver.com:8080/index.jsp

http://myserver.com/index.jsp

works fine, apache send jsp to tomcat engine

but as apache has ssl 443 , opened on the firewall i want

https://myserver.com/index.jsp to work.

let me know what setting required

_
Meet a mate. Find a soulmate. http://www.msn.co.in/Romance/ Or just chat a 
while.

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]




_
Gujarat Kite Fest at http://go.msnserver.com/IN/40247.asp 
www.gujaratkitefest.com

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


Re: Apache + tomcat +ssl

2004-01-13 Thread Spam
 Please, find below the contents of  workers2.properties (mod_jk2):
   [shm]
   file=${serverRoot}/logs/shm.file
   size=1048576
   # Define the communication channel
   [channel.socket:localhost:8009]
   info=Ajp13 forwarding over socket
   tomcatId=localhost:8009
  
   # define the worker
   [ajp13:localhost:8009]
   channel=channel.socket:localhost:8009
  
   # Map the Tomcat examples webapp to the Web server uri space
   [uri:/appserver/*]
   info=Map the whole webapp
   worker=ajp13:localhost:8009

 For mod_jk it looks like this in apache httpd.conf (see JkMount):
   IfModule mod_jk.c
   JkLogLeveldebug
   JkWorkersFile   C:/usr/TMS/AppServer/Resource/workers.properties
   JkLogFileC:/usr/TMS/AppServer/logs/mod_jk.log
   JkMount/appserver/* ajp13
   /IfModule
and workers.properties:
   workers.tomcat_home=C:/usr/CBK2.4/ApplicationServer/catalina
   workers.java_home=C:/usr/java/j2sdk1.4.0_01
   ps=/
   worker.list=ajp12, ajp13
   # Definition for Ajp13 worker (Ajp12 left to readers imagination)
   #
   worker.ajp13.port=8009
   worker.ajp13.host=localhost
   worker.ajp13.type=ajp13
Hope this could help you.

Johann DUPUIS

Omkar Joshi wrote:

can u give me code, how exactly you specify this .../appserver/*





Date: Tue, 13 Jan 2004 10:35:08 +0100
From: Spam [EMAIL PROTECTED]
Subject: Apache + tomcat +ssl
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Hi,

It should not depend on the port you use to connect to apache.
Both http://myserver.com/index.jsp and https://myserver.com/index.jsp
should have the same result with no specific
configuration.
I've configured mod_jk to redirect all .../appserver/*  to tomcat.
Then whatever I use http://localhost/appserver/* or
https://localhost/appserver, it's ok.
Regards.

Johann DUPUIS

Omkar Joshi wrote:

Hi,

I have apache on linux 9 with ssl set up.

also i have set up tomcat amd mod_jk for apache to redirect all jsp 
to tomcat

now as port 80 is open ,

http://myserver.com:8080/index.jsp

http://myserver.com/index.jsp

works fine, apache send jsp to tomcat engine

but as apache has ssl 443 , opened on the firewall i want

https://myserver.com/index.jsp to work.

let me know what setting required

_
Meet a mate. Find a soulmate. http://www.msn.co.in/Romance/ Or just 
chat a while.

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


 

_
Gujarat Kite Fest at http://go.msnserver.com/IN/40247.asp 
www.gujaratkitefest.com

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


Apache + tomcat +ssl

2004-01-13 Thread Omkar Joshi
Ye, i have the same settings for mod_jk

I have now stoped port 80 for apache, so it listens only on port 443

so i added a virtual host entry for port 443, but then apache application 
doest work

_
Games, MMS cards, ringtones. Operator logos, picture messages  more. 
http://server1.msn.co.in/sp03/mobilesms/ Jazz up your mobile!

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


Re: Apache + tomcat +ssl

2004-01-13 Thread Spam
Do you mean it's working (both port 80 and 443) when apache is listening 
to port 80,
but not any more since you stopped listening from this port?

Whatever you have mentionned you have a firewall? Why don't you block 
port 80 using firewall and let apache in its
standard configuration?

Johann DUPUIS

Omkar Joshi wrote:

Ye, i have the same settings for mod_jk

I have now stoped port 80 for apache, so it listens only on port 443

so i added a virtual host entry for port 443, but then apache 
application doest work

_
Games, MMS cards, ringtones. Operator logos, picture messages  more. 
http://server1.msn.co.in/sp03/mobilesms/ Jazz up your mobile!

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


Apache + tomcat +ssl

2004-01-13 Thread Omkar Joshi
What is happening is,

when port 80  and 443 on for apache

http://myserver.com/index.jspand  http://myserver.com:8080/index.jsp  
all work fine

that means apache forwards the jsp handling to tomcat,

 but https://myserver.com/index.jsp doesnt work I get Server Error

_
Contact brides  grooms FREE! http://www.shaadi.com/ptnr.php?ptnr=hmltag 
Only on www.shaadi.com. Register now!

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


RE: Apache + tomcat +ssl

2004-01-13 Thread Bruno.Melloni
This might be a dumb comment, but you do know that Tomcat's HTTPS port is 8443 by 
default, defined in server.xml, right?  And that is only *after* you uncomment that 
part of the server.xml and do all the other Tomcat SSL setup tasks.  I hope this helps.

-Original Message-
From: ext Omkar Joshi [mailto:[EMAIL PROTECTED]
Sent: Tuesday, January 13, 2004 8:03 AM
To: [EMAIL PROTECTED]
Subject: Apache + tomcat +ssl


What is happening is,

when port 80  and 443 on for apache

http://myserver.com/index.jspand  http://myserver.com:8080/index.jsp  
all work fine

that means apache forwards the jsp handling to tomcat,

  but https://myserver.com/index.jsp doesnt work I get Server Error

_
Contact brides  grooms FREE! http://www.shaadi.com/ptnr.php?ptnr=hmltag 
Only on www.shaadi.com. Register now!


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: Apache + tomcat +ssl

2004-01-13 Thread Spam
Apache is used to support SSL requests, in this configuration no need for tomcat to 
know about https.
(of course traffic between apache and tomcat is not encrypted)
I guess port 8443 is used only when tomcat is stand-alone (or for paranoiac ;-) ).

Server Error 
Is it a message issued by tomcat or by apache?
(if issued by tomcat you will probably see tomcat on the page displayed and some logs 
messages in tomcat logs?).
Do you successfully reach static pages (not redirected to tomcat, served 
directly by apache) from https://myserver.com/ ?
I mean the first thing to discard is a pure SSL configuration problem 
(not related to tomcat, nor mod_jk).
(if needed, remove the mod_jk configuration from apache to check that 
SSL-alone is ok)

Could you provide us some hints about your apache configuration, mod_jk 
configuration and the log files (not the full log please,
only the messages related to the request on 
https://myserver.com/index.jsp ).

Johann DUPUIS

[EMAIL PROTECTED] wrote:

This might be a dumb comment, but you do know that Tomcat's HTTPS port is 8443 by default, defined in server.xml, right?  And that is only *after* you uncomment that part of the server.xml and do all the other Tomcat SSL setup tasks.  I hope this helps.

-Original Message-
From: ext Omkar Joshi [mailto:[EMAIL PROTECTED]
Sent: Tuesday, January 13, 2004 8:03 AM
To: [EMAIL PROTECTED]
Subject: Apache + tomcat +ssl
What is happening is,

when port 80  and 443 on for apache

http://myserver.com/index.jspand  http://myserver.com:8080/index.jsp  
all work fine

that means apache forwards the jsp handling to tomcat,

 but https://myserver.com/index.jsp doesnt work I get Server Error

_
Contact brides  grooms FREE! http://www.shaadi.com/ptnr.php?ptnr=hmltag 
Only on www.shaadi.com. Register now!

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
 



-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


Apache + tomcat +ssl

2004-01-13 Thread Omkar Joshi
Yes,

I successfully reach static pages (not redirected to tomcat, served
directly by apache) from https://myserver.com/, no problem with that
also http://myserver.com/index.jspworks fine,

problem with https://myserver.com/index.jsp

error :

Object not found!
The requested URL was not found on this server. If you entered the URL 
manually please check your spelling and try again.
If you think this is a server error, please contact the webmaster
Error 404

configuration:
--
httpd.conf
NameVirtualHost 172.16.16.10:80
virtual host 172.16.16.10:80
servername ...
.
JkMount ...
/virtualhost
All settings according to

http://johnturner.com/howto/apache2-tomcat4127-jk-rh9-howto.html

_
Get head-hunted by 10,000 recruiters. http://go.msnserver.com/IN/35984.asp 
Post your CV on naukri.com today.

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


apache + tomcat + ssl + mod_rewrite

2003-11-10 Thread Andrew Davis
I have a test server setup with Apache 1.3.27, Tomcat 4.1.27, and 
mod_jk2. Its all running on RH Linux ES 2.1.

Apache is setup on ports 80  443. The port 80 config has only the 
basics defined, then has a mod_rewrite rule to send *ALL* traffic to the 
same URL but via https. It also has mod_jk2 setup to forward all .jsp  
.do requests to tomcat. Tomcat is listening on ports 8080 and 8009.

All seems to work fine, but there's a hole. If I go to http://qa-wap1, I 
am properly redirected to https://qa-wap1. As I login, follow links, 
etc., I stay on the secure URL. However, if get into a secure URL... say 
https://qa-wap1/submitProfile.jsp and change the URL in my browser to 
http://qa-wap1:80/submitProfile.jsp and refresh the browser, the entire 
page (content and images, both) reloads and looks perfect. The obvious 
problem is that I just circumvented the secure URL concept. There's a 
hole somewhere that I haven't been able to plug. This occurs with 
multiple browsers.

Interestingly, I have an almost identical setup using Apache 1.3.26 and 
Resin via mod_caucho. The mod_rewrite rule is the same, but if I try to 
substitute the URL as mentioned above, it immediately puts me back on 
the secure URL as it should.

The relevant portions of the config files are below. I'm hoping someone 
can help me get byond this.

Relevant portion of httpd.conf:

VirtualHost qa-wap1:80
ServerName qa-wap1
ServerAlias qa-wap1.my.domain.com
ServerAdmin [EMAIL PROTECTED]
ErrorLog /var/log/httpd/qa-wap1_error_log
TransferLog /var/log/httpd/qa-wap1_access_log
CustomLog /var/log/httpd/qa-wap1_referer_log referer
CustomLog /var/log/httpd/qa-wap1_agent_log agent
#
RewriteEngine on
RewriteLogLevel 0
RewriteRule ^(.*) https://qa-wap1$1 [R=301]
/VirtualHost
VirtualHost qa-wap1:443
ServerName qa-wap1
ServerAlias qa-wap1.my.domain.com
ServerAdmin [EMAIL PROTECTED]
DocumentRoot /usr/tomcat/webapps/Genvault
ErrorLog /var/log/httpd/qa-wap1_ssl_error_log
TransferLog /var/log/httpd/qa-wap1_ssl_access_log
CustomLog /var/log/httpd/qa-wap1_ssl_referer_log referer
CustomLog /var/log/httpd/qa-wap1_ssl_agent_log agent
DirectoryIndex index.htm
# SSL Options
SSLEngine on
SSLCipherSuite ALL:!ADH:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+eNULL
SSLCertificateFile /etc/httpd/certs/qa-wap1.crt
SSLCertificateKeyFile /etc/httpd/certs/qa-wap1.key
# End SSL Options
/VirtualHost
# Load mod_jk2
LoadModule jk2_module modules/mod_jk2.so
AddModule mod_jk2.c
Relevant portion of workers2.properties

#[logger.apache13]
#level=DEBUG
[shm]
file=/var/log/httpd/shm.file
size=1048576
[workerEnv:]
info=Global server options
timing=1
debug=0
[channel.socket:localhost:8009]
port=8009
host=127.0.0.1
# define the worker
[ajp13:localhost:8009]
channel=channel.socket.localhost:8009
# Uri mapping

[uri:/*.jsp]
worker=ajp13:localhost:8009
[uri:/*.do]
worker=ajp13:localhost:8009
[uri:/servlet/*]
worker=ajp13:localhost:8009
[uri:/services/*]
worker=ajp13:localhost:8009
I'm not including my server.xml as I don't think its necessary, but I 
can if it will help. Most interestingly, I decided to circumvent the 
problem by setting a different DocumentRoot for the port 80 vhost, and 
having only a single index.html in the folder and have it do an 
immediate refresh to the secure URL (https://qa-wap1), plus I removed 
the rewrite rules. I would think that in doing this, if I change the URL 
to http://qa-wap1:80/submitProfile.jsp that I should get a 404 error. 
Unfortunately, I got the same results as above... the page loaded 
perfectly on the non-secure URL, except for the images.

And since I know someone will ask, when I change the URL 
(https://qa-wap1/submitProfile.jsp) to 
http://qa-wap1:80/submitProfile.jsp and refresh the browser, yes, the 
lock icon goes away. So its not a client caching issue.

--
Andrew Davis, Founder
SoCalLinuxSolutions
[EMAIL PROTECTED]
760-525-4689
SoCalLinuxSolutions.com
Linux Consultation  Integration Services
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


Re: apache + tomcat + ssl + mod_rewrite

2003-11-10 Thread Erik Wright
If you really believe your mod_rewrite rule is properly configured to 
send *ALL* traffic to the same URL  but via https then:

I would double/triple check the access.log files to see if the request 
is actually getting served from the port 80 server.

If I visit www.foo.com and then change the address to www.bar.com and 
then click 'reload' in IE, it reloads www.foo.com. So I suspect that 
what you are seeing is that the browser is not doing what you expect it 
to do.

Next, I would run a packet sniffer (install ethereal, it's pretty easy) 
and actually check out the request being sent by your browser to port 
80. That should give you a better idea what the problem is.

I mean, if you haven't configured your port 80 apache to talk to Tomcat, 
then the page you are seeing in your browser can't be arriving from port 
80... simple as that, no?

- Erik

Andrew Davis wrote:

I have a test server setup with Apache 1.3.27, Tomcat 4.1.27, and 
mod_jk2. Its all running on RH Linux ES 2.1.

Apache is setup on ports 80  443. The port 80 config has only the 
basics defined, then has a mod_rewrite rule to send *ALL* traffic to 
the same URL but via https. It also has mod_jk2 setup to forward all 
.jsp  .do requests to tomcat. Tomcat is listening on ports 8080 and 
8009.

All seems to work fine, but there's a hole. If I go to http://qa-wap1, 
I am properly redirected to https://qa-wap1. As I login, follow links, 
etc., I stay on the secure URL. However, if get into a secure URL... 
say https://qa-wap1/submitProfile.jsp and change the URL in my browser 
to http://qa-wap1:80/submitProfile.jsp and refresh the browser, the 
entire page (content and images, both) reloads and looks perfect. The 
obvious problem is that I just circumvented the secure URL concept. 
There's a hole somewhere that I haven't been able to plug. This occurs 
with multiple browsers.

Interestingly, I have an almost identical setup using Apache 1.3.26 
and Resin via mod_caucho. The mod_rewrite rule is the same, but if I 
try to substitute the URL as mentioned above, it immediately puts me 
back on the secure URL as it should.

The relevant portions of the config files are below. I'm hoping 
someone can help me get byond this.

Relevant portion of httpd.conf:

VirtualHost qa-wap1:80
ServerName qa-wap1
ServerAlias qa-wap1.my.domain.com
ServerAdmin [EMAIL PROTECTED]
ErrorLog /var/log/httpd/qa-wap1_error_log
TransferLog /var/log/httpd/qa-wap1_access_log
CustomLog /var/log/httpd/qa-wap1_referer_log referer
CustomLog /var/log/httpd/qa-wap1_agent_log agent
#
RewriteEngine on
RewriteLogLevel 0
RewriteRule ^(.*) https://qa-wap1$1 [R=301]
/VirtualHost
VirtualHost qa-wap1:443
ServerName qa-wap1
ServerAlias qa-wap1.my.domain.com
ServerAdmin [EMAIL PROTECTED]
DocumentRoot /usr/tomcat/webapps/Genvault
ErrorLog /var/log/httpd/qa-wap1_ssl_error_log
TransferLog /var/log/httpd/qa-wap1_ssl_access_log
CustomLog /var/log/httpd/qa-wap1_ssl_referer_log referer
CustomLog /var/log/httpd/qa-wap1_ssl_agent_log agent
DirectoryIndex index.htm
# SSL Options
SSLEngine on
SSLCipherSuite ALL:!ADH:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+eNULL
SSLCertificateFile /etc/httpd/certs/qa-wap1.crt
SSLCertificateKeyFile /etc/httpd/certs/qa-wap1.key
# End SSL Options
/VirtualHost
# Load mod_jk2
LoadModule jk2_module modules/mod_jk2.so
AddModule mod_jk2.c
Relevant portion of workers2.properties

#[logger.apache13]
#level=DEBUG
[shm]
file=/var/log/httpd/shm.file
size=1048576
[workerEnv:]
info=Global server options
timing=1
debug=0
[channel.socket:localhost:8009]
port=8009
host=127.0.0.1
# define the worker
[ajp13:localhost:8009]
channel=channel.socket.localhost:8009
# Uri mapping

[uri:/*.jsp]
worker=ajp13:localhost:8009
[uri:/*.do]
worker=ajp13:localhost:8009
[uri:/servlet/*]
worker=ajp13:localhost:8009
[uri:/services/*]
worker=ajp13:localhost:8009
I'm not including my server.xml as I don't think its necessary, but I 
can if it will help. Most interestingly, I decided to circumvent the 
problem by setting a different DocumentRoot for the port 80 vhost, and 
having only a single index.html in the folder and have it do an 
immediate refresh to the secure URL (https://qa-wap1), plus I removed 
the rewrite rules. I would think that in doing this, if I change the 
URL to http://qa-wap1:80/submitProfile.jsp that I should get a 404 
error. Unfortunately, I got the same results as above... the page 
loaded perfectly on the non-secure URL, except for the images.

And since I know someone will ask, when I change the URL 
(https://qa-wap1/submitProfile.jsp) to 
http://qa-wap1:80/submitProfile.jsp and refresh the browser, yes, the 
lock icon goes away. So its not a client caching issue.



--
http://www.spectacle.ca/
The Online Source for Live Music in Montreal
.::514.286.1699::.


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


Re: apache + tomcat + ssl + mod_rewrite

2003-11-10 Thread Andrew Davis
Thank you. Ironically, I realized I had forgotten a test. After going to 
a URL the normal way (https://qa-wap1/submitProfile.jsp), then changing 
the URL in the web browser to http://qa-wap1:80/submitProfile.jsp and 
reloading, the URL worked. I've mentioned this already. What I hadn't 
tried was clicking a link within the page. Doing so either took me back 
to the login screen or generated a 404 error.

Interestingly, the actual solution was found from the apache modules 
mailing list at: [EMAIL PROTECTED] A few replies reminded me 
that the loading order of modules *is* important. Since modules are 
loaded from bottom-to-top, I put the mod_jk2 entry above mod_rewrite (so 
mod_rewrite would load first), then restarted httpd. It now works 
perfectly. If I change https://qa-wap1/submitProfile.jsp to 
http://qa-wap1:80/submitProfile.jsp and refresh the browser, it goes 
back to the https site.

AD

Erik Wright wrote:

If you really believe your mod_rewrite rule is properly configured to 
send *ALL* traffic to the same URL  but via https then:

I would double/triple check the access.log files to see if the request 
is actually getting served from the port 80 server.

If I visit www.foo.com and then change the address to www.bar.com and 
then click 'reload' in IE, it reloads www.foo.com. So I suspect that 
what you are seeing is that the browser is not doing what you expect it 
to do.

Next, I would run a packet sniffer (install ethereal, it's pretty easy) 
and actually check out the request being sent by your browser to port 
80. That should give you a better idea what the problem is.

I mean, if you haven't configured your port 80 apache to talk to Tomcat, 
then the page you are seeing in your browser can't be arriving from port 
80... simple as that, no?

- Erik

Andrew Davis wrote:

I have a test server setup with Apache 1.3.27, Tomcat 4.1.27, and 
mod_jk2. Its all running on RH Linux ES 2.1.

Apache is setup on ports 80  443. The port 80 config has only the 
basics defined, then has a mod_rewrite rule to send *ALL* traffic to 
the same URL but via https. It also has mod_jk2 setup to forward all 
.jsp  .do requests to tomcat. Tomcat is listening on ports 8080 and 
8009.

All seems to work fine, but there's a hole. If I go to http://qa-wap1, 
I am properly redirected to https://qa-wap1. As I login, follow links, 
etc., I stay on the secure URL. However, if get into a secure URL... 
say https://qa-wap1/submitProfile.jsp and change the URL in my browser 
to http://qa-wap1:80/submitProfile.jsp and refresh the browser, the 
entire page (content and images, both) reloads and looks perfect. The 
obvious problem is that I just circumvented the secure URL concept. 
There's a hole somewhere that I haven't been able to plug. This occurs 
with multiple browsers.

Interestingly, I have an almost identical setup using Apache 1.3.26 
and Resin via mod_caucho. The mod_rewrite rule is the same, but if I 
try to substitute the URL as mentioned above, it immediately puts me 
back on the secure URL as it should.

The relevant portions of the config files are below. I'm hoping 
someone can help me get byond this.

Relevant portion of httpd.conf:

VirtualHost qa-wap1:80
ServerName qa-wap1
ServerAlias qa-wap1.my.domain.com
ServerAdmin [EMAIL PROTECTED]
ErrorLog /var/log/httpd/qa-wap1_error_log
TransferLog /var/log/httpd/qa-wap1_access_log
CustomLog /var/log/httpd/qa-wap1_referer_log referer
CustomLog /var/log/httpd/qa-wap1_agent_log agent
#
RewriteEngine on
RewriteLogLevel 0
RewriteRule ^(.*) https://qa-wap1$1 [R=301]
/VirtualHost
VirtualHost qa-wap1:443
ServerName qa-wap1
ServerAlias qa-wap1.my.domain.com
ServerAdmin [EMAIL PROTECTED]
DocumentRoot /usr/tomcat/webapps/Genvault
ErrorLog /var/log/httpd/qa-wap1_ssl_error_log
TransferLog /var/log/httpd/qa-wap1_ssl_access_log
CustomLog /var/log/httpd/qa-wap1_ssl_referer_log referer
CustomLog /var/log/httpd/qa-wap1_ssl_agent_log agent
DirectoryIndex index.htm
# SSL Options
SSLEngine on
SSLCipherSuite ALL:!ADH:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+eNULL
SSLCertificateFile /etc/httpd/certs/qa-wap1.crt
SSLCertificateKeyFile /etc/httpd/certs/qa-wap1.key
# End SSL Options
/VirtualHost
# Load mod_jk2
LoadModule jk2_module modules/mod_jk2.so
AddModule mod_jk2.c
Relevant portion of workers2.properties

#[logger.apache13]
#level=DEBUG
[shm]
file=/var/log/httpd/shm.file
size=1048576
[workerEnv:]
info=Global server options
timing=1
debug=0
[channel.socket:localhost:8009]
port=8009
host=127.0.0.1
# define the worker
[ajp13:localhost:8009]
channel=channel.socket.localhost:8009
# Uri mapping

[uri:/*.jsp]
worker=ajp13:localhost:8009
[uri:/*.do]
worker=ajp13:localhost:8009
[uri:/servlet/*]
worker=ajp13:localhost:8009
[uri:/services/*]
worker=ajp13:localhost:8009
I'm not including my server.xml as I don't think its necessary, but I 
can if it will help. Most interestingly, I decided to circumvent the 
problem by setting a different DocumentRoot for the port 80 vhost, and 
having only a single 

Problems with Apache-Tomcat SSL

2003-10-21 Thread Low, Claudia
Hi,

  I have a problem working on apache-tomcat SSL.
  My set up is using apache server to talk to tomcat using mod_jk.
  When I access my site using non SSL, it works and can load up the page.
However, when i use SSL, it gives an 401 exception.
  The SSL works if I try https://localhost:443/ on my machine.
  I couldn't understand why it didn't work. Can anyone also help me to
explain what does sending to ajp13 #NN means?

  Here is the mod_jk.log.
  This is the one that works with port 80.
[Tue Oct 21 19:36:42 2003]  [mod_jk.c (497)]: agsp=80 agsn=clow
hostn=clow shostn=localhost cbsport=80 sport=80 
[Tue Oct 21 19:36:42 2003]  [jk_ajp_common.c (1546)]: Into
jk_worker_t::get_endpoint
[Tue Oct 21 19:36:42 2003]  [jk_ajp_common.c (1590)]: In
jk_endpoint_t::ajp_get_endpoint, time elapsed since last request = 0 seconds
[Tue Oct 21 19:36:42 2003]  [jk_ajp_common.c (1208)]: Into
jk_endpoint_t::service
[Tue Oct 21 19:36:42 2003]  [jk_ajp_common.c (295)]: Into
ajp_marshal_into_msgb
[Tue Oct 21 19:36:42 2003]  [jk_ajp_common.c (463)]:
ajp_marshal_into_msgb - Done
[Tue Oct 21 19:36:42 2003]  [jk_ajp_common.c (693)]: sending to
ajp13 #297
[Tue Oct 21 19:36:42 2003]  [jk_ajp_common.c (966)]:
ajp_send_request 2: request body to send 0 - request body to resend 0
[Tue Oct 21 19:36:42 2003]  [jk_ajp_common.c (804)]: received from
ajp13 #156
[Tue Oct 21 19:36:42 2003]  [jk_ajp_common.c (515)]:
ajp_unmarshal_response: status = 200
[Tue Oct 21 19:36:42 2003]  [jk_ajp_common.c (521)]:
ajp_unmarshal_response: Number of headers is = 4
[Tue Oct 21 19:36:42 2003]  [jk_ajp_common.c (575)]:
ajp_unmarshal_response: Header[0] [ETag] = [W/7102-1064919232265]
[Tue Oct 21 19:36:42 2003]  [jk_ajp_common.c (575)]:
ajp_unmarshal_response: Header[1] [Last-Modified] = [Tue, 30 Sep 2003
10:53:52 GMT]
[Tue Oct 21 19:36:42 2003]  [jk_ajp_common.c (575)]:
ajp_unmarshal_response: Header[2] [Content-Type] =
[application/x-javascript]
[Tue Oct 21 19:36:42 2003]  [jk_ajp_common.c (575)]:
ajp_unmarshal_response: Header[3] [Content-Length] = [7102]
[Tue Oct 21 19:36:42 2003]  [jk_ajp_common.c (804)]: received from
ajp13 #7106
[Tue Oct 21 19:36:42 2003]  [mod_jk.c (398)]: writing 4096 (4096)
out of 7102 
[Tue Oct 21 19:36:42 2003]  [mod_jk.c (398)]: writing 3006 (3006)
out of 3006 
[Tue Oct 21 19:36:42 2003]  [jk_ajp_common.c (804)]: received from
ajp13 #2
[Tue Oct 21 19:36:42 2003]  [jk_ajp_common.c (1521)]: Into
jk_endpoint_t::done, recycling connection
[Tue Oct 21 19:36:54 2003]  [jk_uri_worker_map.c (460)]: Into
jk_uri_worker_map_t::map_uri_to_worker
[Tue Oct 21 19:36:54 2003]  [jk_uri_worker_map.c (477)]: Attempting
to map URI '/webx/xfm/TLMS_W_Menu.xfm'
[Tue Oct 21 19:36:54 2003]  [jk_uri_worker_map.c (502)]:
jk_uri_worker_map_t::map_uri_to_worker, Found a context match ajp13 -
/webx/
[Tue Oct 21 19:36:54 2003]  [mod_jk.c (1708)]: Into handler
r-proxyreq=0 r-handler=jakarta-servlet r-notes=8950096 worker=ajp13
[Tue Oct 21 19:36:54 2003]  [jk_worker.c (132)]: Into
wc_get_worker_for_name ajp13

 This is the one that doesn't work with 433.
[Tue Oct 21 19:36:54 2003]  [jk_worker.c (136)]:
wc_get_worker_for_name, done  found a worker
[Tue Oct 21 19:36:54 2003]  [mod_jk.c (497)]: agsp=443 agsn=clow
hostn=clow shostn=localhost cbsport=443 sport=443 
[Tue Oct 21 19:36:54 2003]  [jk_ajp_common.c (1546)]: Into
jk_worker_t::get_endpoint
[Tue Oct 21 19:36:54 2003]  [jk_ajp_common.c (1590)]: In
jk_endpoint_t::ajp_get_endpoint, time elapsed since last request = 12
seconds
[Tue Oct 21 19:36:54 2003]  [jk_ajp_common.c (1208)]: Into
jk_endpoint_t::service
[Tue Oct 21 19:36:54 2003]  [jk_ajp_common.c (295)]: Into
ajp_marshal_into_msgb
[Tue Oct 21 19:36:54 2003]  [jk_ajp_common.c (463)]:
ajp_marshal_into_msgb - Done
[Tue Oct 21 19:36:54 2003]  [jk_ajp_common.c (693)]: sending to
ajp13 #406
[Tue Oct 21 19:36:54 2003]  [jk_ajp_common.c (966)]:
ajp_send_request 2: request body to send 0 - request body to resend 0
[Tue Oct 21 19:36:54 2003]  [jk_ajp_common.c (804)]: received from
ajp13 #105
[Tue Oct 21 19:36:54 2003]  [jk_ajp_common.c (515)]:
ajp_unmarshal_response: status = 401
[Tue Oct 21 19:36:54 2003]  [jk_ajp_common.c (521)]:
ajp_unmarshal_response: Number of headers is = 2
[Tue Oct 21 19:36:54 2003]  [jk_ajp_common.c (575)]:
ajp_unmarshal_response: Header[0] [WWW-Authenticate] = [BASIC relam=B2B]
[Tue Oct 21 19:36:54 2003]  [jk_ajp_common.c (575)]:
ajp_unmarshal_response: Header[1] [Content-Type] =
[text/html;charset=ISO-8859-1]
[Tue Oct 21 19:36:54 2003]  [jk_ajp_common.c (804)]: received from
ajp13 #94
[Tue Oct 21 19:36:54 2003]  [mod_jk.c (398)]: writing 90 (90) out of
90 
[Tue Oct 21 19:36:54 2003]  [jk_ajp_common.c (804

Re: Problems with Apache-Tomcat SSL

2003-10-21 Thread Bill Barker
The 401 response is coming from Tomcat, so I'm guessing that there is
something different in your configuration in the two cases.  It looks like
mod_jk is working fine:  It is just passing on Tomcat's request that you
login before viewing the page.

Low, Claudia [EMAIL PROTECTED] wrote in message
news:[EMAIL PROTECTED]
 Hi,

   I have a problem working on apache-tomcat SSL.
   My set up is using apache server to talk to tomcat using mod_jk.
   When I access my site using non SSL, it works and can load up the page.
 However, when i use SSL, it gives an 401 exception.
   The SSL works if I try https://localhost:443/ on my machine.
   I couldn't understand why it didn't work. Can anyone also help me to
 explain what does sending to ajp13 #NN means?


I believe it's the worker's number (the internal identifier for the worker).

   Here is the mod_jk.log.
   This is the one that works with port 80.
 [Tue Oct 21 19:36:42 2003]  [mod_jk.c (497)]: agsp=80 agsn=clow
 hostn=clow shostn=localhost cbsport=80 sport=80
 [Tue Oct 21 19:36:42 2003]  [jk_ajp_common.c (1546)]: Into
 jk_worker_t::get_endpoint
 [Tue Oct 21 19:36:42 2003]  [jk_ajp_common.c (1590)]: In
 jk_endpoint_t::ajp_get_endpoint, time elapsed since last request = 0
seconds
 [Tue Oct 21 19:36:42 2003]  [jk_ajp_common.c (1208)]: Into
 jk_endpoint_t::service
 [Tue Oct 21 19:36:42 2003]  [jk_ajp_common.c (295)]: Into
 ajp_marshal_into_msgb
 [Tue Oct 21 19:36:42 2003]  [jk_ajp_common.c (463)]:
 ajp_marshal_into_msgb - Done
 [Tue Oct 21 19:36:42 2003]  [jk_ajp_common.c (693)]: sending to
 ajp13 #297
 [Tue Oct 21 19:36:42 2003]  [jk_ajp_common.c (966)]:
 ajp_send_request 2: request body to send 0 - request body to resend 0
 [Tue Oct 21 19:36:42 2003]  [jk_ajp_common.c (804)]: received from
 ajp13 #156
 [Tue Oct 21 19:36:42 2003]  [jk_ajp_common.c (515)]:
 ajp_unmarshal_response: status = 200
 [Tue Oct 21 19:36:42 2003]  [jk_ajp_common.c (521)]:
 ajp_unmarshal_response: Number of headers is = 4
 [Tue Oct 21 19:36:42 2003]  [jk_ajp_common.c (575)]:
 ajp_unmarshal_response: Header[0] [ETag] = [W/7102-1064919232265]
 [Tue Oct 21 19:36:42 2003]  [jk_ajp_common.c (575)]:
 ajp_unmarshal_response: Header[1] [Last-Modified] = [Tue, 30 Sep 2003
 10:53:52 GMT]
 [Tue Oct 21 19:36:42 2003]  [jk_ajp_common.c (575)]:
 ajp_unmarshal_response: Header[2] [Content-Type] =
 [application/x-javascript]
 [Tue Oct 21 19:36:42 2003]  [jk_ajp_common.c (575)]:
 ajp_unmarshal_response: Header[3] [Content-Length] = [7102]
 [Tue Oct 21 19:36:42 2003]  [jk_ajp_common.c (804)]: received from
 ajp13 #7106
 [Tue Oct 21 19:36:42 2003]  [mod_jk.c (398)]: writing 4096 (4096)
 out of 7102
 [Tue Oct 21 19:36:42 2003]  [mod_jk.c (398)]: writing 3006 (3006)
 out of 3006
 [Tue Oct 21 19:36:42 2003]  [jk_ajp_common.c (804)]: received from
 ajp13 #2
 [Tue Oct 21 19:36:42 2003]  [jk_ajp_common.c (1521)]: Into
 jk_endpoint_t::done, recycling connection
 [Tue Oct 21 19:36:54 2003]  [jk_uri_worker_map.c (460)]: Into
 jk_uri_worker_map_t::map_uri_to_worker
 [Tue Oct 21 19:36:54 2003]  [jk_uri_worker_map.c (477)]: Attempting
 to map URI '/webx/xfm/TLMS_W_Menu.xfm'
 [Tue Oct 21 19:36:54 2003]  [jk_uri_worker_map.c (502)]:
 jk_uri_worker_map_t::map_uri_to_worker, Found a context match ajp13 -
 /webx/
 [Tue Oct 21 19:36:54 2003]  [mod_jk.c (1708)]: Into handler
 r-proxyreq=0 r-handler=jakarta-servlet r-notes=8950096 worker=ajp13
 [Tue Oct 21 19:36:54 2003]  [jk_worker.c (132)]: Into
 wc_get_worker_for_name ajp13

  This is the one that doesn't work with 433.
 [Tue Oct 21 19:36:54 2003]  [jk_worker.c (136)]:
 wc_get_worker_for_name, done  found a worker
 [Tue Oct 21 19:36:54 2003]  [mod_jk.c (497)]: agsp=443 agsn=clow
 hostn=clow shostn=localhost cbsport=443 sport=443
 [Tue Oct 21 19:36:54 2003]  [jk_ajp_common.c (1546)]: Into
 jk_worker_t::get_endpoint
 [Tue Oct 21 19:36:54 2003]  [jk_ajp_common.c (1590)]: In
 jk_endpoint_t::ajp_get_endpoint, time elapsed since last request = 12
 seconds
 [Tue Oct 21 19:36:54 2003]  [jk_ajp_common.c (1208)]: Into
 jk_endpoint_t::service
 [Tue Oct 21 19:36:54 2003]  [jk_ajp_common.c (295)]: Into
 ajp_marshal_into_msgb
 [Tue Oct 21 19:36:54 2003]  [jk_ajp_common.c (463)]:
 ajp_marshal_into_msgb - Done
 [Tue Oct 21 19:36:54 2003]  [jk_ajp_common.c (693)]: sending to
 ajp13 #406
 [Tue Oct 21 19:36:54 2003]  [jk_ajp_common.c (966)]:
 ajp_send_request 2: request body to send 0 - request body to resend 0
 [Tue Oct 21 19:36:54 2003]  [jk_ajp_common.c (804)]: received from
 ajp13 #105
 [Tue Oct 21 19:36:54 2003]  [jk_ajp_common.c (515)]:
 ajp_unmarshal_response: status = 401
 [Tue Oct 21 19:36:54 2003]  [jk_ajp_common.c (521)]:
 ajp_unmarshal_response: Number of headers is = 2
 [Tue Oct 21 19:36:54 2003]  [jk_ajp_common.c (575)]:
 ajp_unmarshal_response: Header[0] [WWW-Authenticate] = [BASIC relam=B2B]
 [Tue Oct 21 19:36:54 2003]  [jk_ajp_common.c (575)]:
 ajp_unmarshal_response: Header[1] [Content-Type] =
 [text/html;charset=ISO-8859-1]
 [Tue Oct 21 19:36:54 2003]  [jk_ajp_common.c (804

RE: Default Page Apache/Tomcat/SSL

2003-03-04 Thread apachep2
What I can think of is

1. call your index.jsp in index.html; or
2. put index.jsp in webapps/yourapp

-Original Message-
From: Maya Gadde [mailto:[EMAIL PROTECTED] 
Sent: March 3, 2003 6:47 PM
To: [EMAIL PROTECTED]
Subject: Default Page Apache/Tomcat/SSL

Hi,

We have Tomcat 4.1.12 configured with Apache 2.x + SSL. My webapps are
installed 
in the webapp directory for tomcat. I want the default page loaded on
one of my 
apps to be index.jsp instead of index.html. I have tried everything so
far and 
have failed.

My httpd.conf has the following listing:

#
# DirectoryIndex: Name of the file or files to use as a pre-written HTML
# directory index.  Separate multiple entries with spaces.
#
IfModule mod_dir.c
DirectoryIndex index.html index.htm index.shtml index.php index.php4

index.php3 index.phtml index.cgi index.jsp
/IfModule


web.xml has the following:

welcome-file-list
welcome-fileindex.html/welcome-file
welcome-fileindex.htm/welcome-file
welcome-fileindex.jsp/welcome-file
/welcome-file-list


It still doesn't load index.jsp. This is what I get when I try:

Bad Request
Your browser sent a request that this server could not understand.

Reason: You're speaking plain HTTP to an SSL-enabled server port.
Instead use the HTTPS scheme to access this URL

I am using https://.../xyz

Help!!
-- 
Regards,
Maya


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Default Page Apache/Tomcat/SSL

2003-03-03 Thread Maya Gadde
Hi,

We have Tomcat 4.1.12 configured with Apache 2.x + SSL. My webapps are installed 
in the webapp directory for tomcat. I want the default page loaded on one of my 
apps to be index.jsp instead of index.html. I have tried everything so far and 
have failed.

My httpd.conf has the following listing:

#
# DirectoryIndex: Name of the file or files to use as a pre-written HTML
# directory index.  Separate multiple entries with spaces.
#
IfModule mod_dir.c
DirectoryIndex index.html index.htm index.shtml index.php index.php4 
index.php3 index.phtml index.cgi index.jsp
/IfModule


web.xml has the following:

welcome-file-list
welcome-fileindex.html/welcome-file
welcome-fileindex.htm/welcome-file
welcome-fileindex.jsp/welcome-file
/welcome-file-list


It still doesn't load index.jsp. This is what I get when I try:

Bad Request
Your browser sent a request that this server could not understand.

Reason: You're speaking plain HTTP to an SSL-enabled server port.
Instead use the HTTPS scheme to access this URL

I am using https://.../xyz

Help!!
-- 
Regards,
Maya


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



apache + tomcat + ssl

2002-09-23 Thread Fabio Marsilio

Hi all,

I have a problem with apache + tomcat + ssl

My configuration:

- Webserver Machine (Linux):  apache 1.3.26 + mod_ssl 2.8.10-1.3.26 +
mod_webapps 1.0.1

  (this Machine is in the firewall's Dmz)


- Jsp Engine Machine (Solaris): tomcat 4.0.1

  (this machine is in the trusted network of the firewall)

The firewall has a rule that allows tcp traffic between the two machines on
port 8008 (webapp ponnector)

All worked fine between apache and tomcat until I began to use ssl.

I configured a virtual host with ssl and all worked fine but if I wait a
certain amount of time (at least 12 hours)

then the server seem not to respond any more.

If I restart apache (not tomcat!) all works again.

This did not happen with apache withous ssl.

Yes , it's a strange problem, maybe a timeout of connections...

If someone has any Idea .it's welcome!

I cannot make an apache restart every morning ...   : )

Thank you in advance



Fabio Marsilio

[EMAIL PROTECTED]




Apache Tomcat SSL

2002-09-05 Thread Bernhard Blasen

Hello,

I succeeded connecting tomcat 4.0.4 with apache 2.0.40 with mod-jk.

If i call an application with https://luna.draft.de/hvb-immoplus I get a 
404 error
The same call with http://... works fine.
Other https://-connections, that do not need tomcat work fine either.

My log-files and the configuration files can be found on 
http://luna.draft.de/tomcat

System is linux Distribution is SuSE 7.3.

Thank you for Help

Bernhard Blasen



--
To unsubscribe, e-mail:   mailto:[EMAIL PROTECTED]
For additional commands, e-mail: mailto:[EMAIL PROTECTED]




RE: Apache Tomcat SSL

2002-09-05 Thread Turner, John


I just tried https://luna.draft.de/hvb-immoplus  and it worked perfectly
(8:59AM EST, USA).

It redirected me to https://luna.draft.de/hvb-immoplus/index.jsp which looks
like exactly what it should do.

John


 -Original Message-
 From: Bernhard Blasen [mailto:[EMAIL PROTECTED]]
 Sent: Thursday, September 05, 2002 5:46 AM
 To: [EMAIL PROTECTED]
 Subject: Apache Tomcat SSL
 
 
 Hello,
 
 I succeeded connecting tomcat 4.0.4 with apache 2.0.40 with mod-jk.
 
 If i call an application with 
 https://luna.draft.de/hvb-immoplus I get a 
 404 error
 The same call with http://... works fine.
 Other https://-connections, that do not need tomcat work 
 fine either.
 
 My log-files and the configuration files can be found on 
 http://luna.draft.de/tomcat
 
 System is linux Distribution is SuSE 7.3.
 
 Thank you for Help
 
 Bernhard Blasen

--
To unsubscribe, e-mail:   mailto:[EMAIL PROTECTED]
For additional commands, e-mail: mailto:[EMAIL PROTECTED]




Re: Apache Tomcat SSL

2002-09-05 Thread Milt Epstein

On Thu, 5 Sep 2002, Bernhard Blasen wrote:

 Hello,

 I succeeded connecting tomcat 4.0.4 with apache 2.0.40 with mod-jk.

 If i call an application with https://luna.draft.de/hvb-immoplus I get a
 404 error
 The same call with http://... works fine.
 Other https://-connections, that do not need tomcat work fine either.

 My log-files and the configuration files can be found on
 http://luna.draft.de/tomcat

 System is linux Distribution is SuSE 7.3.

 Thank you for Help

I'm not interested in going up on the web to check your
log/configuration files, but the first thing that strikes me here is
that with the way Apache handles SSL -- with a virtual host -- it may
be that your relevant mod_jk directives are in the main section of your
Apache configuration file, and not in the block for the SSL virtual
host.  You may need to move/copy them there, as appropriate.

Milt Epstein
Research Programmer
Systems and Technology Services (STS)
Campus Information Technologies and Educational Services (CITES)
University of Illinois at Urbana-Champaign (UIUC)
[EMAIL PROTECTED]


--
To unsubscribe, e-mail:   mailto:[EMAIL PROTECTED]
For additional commands, e-mail: mailto:[EMAIL PROTECTED]




Apache Tomcat SSL Integration

2002-08-27 Thread Tyrone Buckle

Hi all. I have an Apache install that serves all my static html pages
and a Tomcat install that serves a JSP user registration system. I have
the two talking to one another using mod_webapp and everything is fine.
The thing is I need to use SSL for my user registration system. How do I
tell Apache to tell Tomcat to use SSL when it serves from a certain
directory?

Please help :(

Thanking  you in advance,
Tyrone



--
To unsubscribe, e-mail:   mailto:[EMAIL PROTECTED]
For additional commands, e-mail: mailto:[EMAIL PROTECTED]




RE: Apache Tomcat SSL Integration

2002-08-27 Thread Turner, John


You don't need to.  Just setup SSL on Apache.  You only need SSL on tomcat
if you are using tomcat in stand-alone mode.

John Turner
[EMAIL PROTECTED]

 -Original Message-
 From: Tyrone Buckle [mailto:[EMAIL PROTECTED]]
 Sent: Tuesday, August 27, 2002 8:31 AM
 To: [EMAIL PROTECTED]
 Subject: Apache  Tomcat SSL Integration
 
 
 Hi all. I have an Apache install that serves all my static html pages
 and a Tomcat install that serves a JSP user registration 
 system. I have
 the two talking to one another using mod_webapp and 
 everything is fine.
 The thing is I need to use SSL for my user registration 
 system. How do I
 tell Apache to tell Tomcat to use SSL when it serves from a certain
 directory?
 
 Please help :(
 
 Thanking  you in advance,
 Tyrone
 
 
 
 --
 To unsubscribe, e-mail:   
 mailto:[EMAIL PROTECTED]
 For additional commands, e-mail: 
 mailto:[EMAIL PROTECTED]
 

--
To unsubscribe, e-mail:   mailto:[EMAIL PROTECTED]
For additional commands, e-mail: mailto:[EMAIL PROTECTED]




Re: Apache Tomcat SSL Integration

2002-08-27 Thread Peter Choe

you can use mod_ssl and have apache handle the ssl connections to tomcat.

At 08:30 AM 8/27/2002, you wrote:
Hi all. I have an Apache install that serves all my static html pages
and a Tomcat install that serves a JSP user registration system. I have
the two talking to one another using mod_webapp and everything is fine.
The thing is I need to use SSL for my user registration system. How do I
tell Apache to tell Tomcat to use SSL when it serves from a certain
directory?

Please help :(

Thanking  you in advance,
Tyrone



--
To unsubscribe, e-mail:   mailto:[EMAIL PROTECTED]
For additional commands, e-mail: mailto:[EMAIL PROTECTED]


--
To unsubscribe, e-mail:   mailto:[EMAIL PROTECTED]
For additional commands, e-mail: mailto:[EMAIL PROTECTED]




Re: Apache Tomcat SSL Integration

2002-08-27 Thread Tyrone Buckle

Cool, is there some good documentation for this somewhere.
Thanks for the quick response!

Peter Choe wrote:

 you can use mod_ssl and have apache handle the ssl connections to tomcat.

 At 08:30 AM 8/27/2002, you wrote:
 Hi all. I have an Apache install that serves all my static html pages
 and a Tomcat install that serves a JSP user registration system. I have
 the two talking to one another using mod_webapp and everything is fine.
 The thing is I need to use SSL for my user registration system. How do I
 tell Apache to tell Tomcat to use SSL when it serves from a certain
 directory?
 
 Please help :(
 
 Thanking  you in advance,
 Tyrone
 
 
 
 --
 To unsubscribe, e-mail:   mailto:[EMAIL PROTECTED]
 For additional commands, e-mail: mailto:[EMAIL PROTECTED]

 --
 To unsubscribe, e-mail:   mailto:[EMAIL PROTECTED]
 For additional commands, e-mail: mailto:[EMAIL PROTECTED]



--
To unsubscribe, e-mail:   mailto:[EMAIL PROTECTED]
For additional commands, e-mail: mailto:[EMAIL PROTECTED]




Re: Apache Tomcat SSL Integration

2002-08-27 Thread Peter Choe

www.mod_ssl.org

At 08:39 AM 8/27/2002, you wrote:
Cool, is there some good documentation for this somewhere.
Thanks for the quick response!

Peter Choe wrote:

  you can use mod_ssl and have apache handle the ssl connections to tomcat.
 
  At 08:30 AM 8/27/2002, you wrote:
  Hi all. I have an Apache install that serves all my static html pages
  and a Tomcat install that serves a JSP user registration system. I have
  the two talking to one another using mod_webapp and everything is fine.
  The thing is I need to use SSL for my user registration system. How do I
  tell Apache to tell Tomcat to use SSL when it serves from a certain
  directory?
  
  Please help :(
  
  Thanking  you in advance,
  Tyrone
  
  
  
  --
  To unsubscribe, 
 e-mail:   mailto:[EMAIL PROTECTED]
  For additional commands, e-mail: 
 mailto:[EMAIL PROTECTED]
 
  --
  To unsubscribe, 
 e-mail:   mailto:[EMAIL PROTECTED]
  For additional commands, e-mail: 
 mailto:[EMAIL PROTECTED]



--
To unsubscribe, e-mail:   mailto:[EMAIL PROTECTED]
For additional commands, e-mail: mailto:[EMAIL PROTECTED]


--
To unsubscribe, e-mail:   mailto:[EMAIL PROTECTED]
For additional commands, e-mail: mailto:[EMAIL PROTECTED]




RE: Apache Tomcat SSL Integration

2002-08-27 Thread Turner, John


http://www.modssl.org

John Turner
[EMAIL PROTECTED]


 -Original Message-
 From: Tyrone Buckle [mailto:[EMAIL PROTECTED]]
 Sent: Tuesday, August 27, 2002 8:40 AM
 To: Tomcat Users List
 Subject: Re: Apache  Tomcat SSL Integration
 
 
 Cool, is there some good documentation for this somewhere.
 Thanks for the quick response!
 
 Peter Choe wrote:
 
  you can use mod_ssl and have apache handle the ssl 
 connections to tomcat.
 
  At 08:30 AM 8/27/2002, you wrote:
  Hi all. I have an Apache install that serves all my static 
 html pages
  and a Tomcat install that serves a JSP user registration 
 system. I have
  the two talking to one another using mod_webapp and 
 everything is fine.
  The thing is I need to use SSL for my user registration 
 system. How do I
  tell Apache to tell Tomcat to use SSL when it serves from a certain
  directory?
  
  Please help :(
  
  Thanking  you in advance,
  Tyrone
  
  
  
  --
  To unsubscribe, e-mail:   
 mailto:[EMAIL PROTECTED]
  For additional commands, e-mail: 
 mailto:[EMAIL PROTECTED]
 
  --
  To unsubscribe, e-mail:   
mailto:[EMAIL PROTECTED]
 For additional commands, e-mail:
mailto:[EMAIL PROTECTED]



--
To unsubscribe, e-mail:
mailto:[EMAIL PROTECTED]
For additional commands, e-mail:
mailto:[EMAIL PROTECTED]

--
To unsubscribe, e-mail:   mailto:[EMAIL PROTECTED]
For additional commands, e-mail: mailto:[EMAIL PROTECTED]




AW: TOMCAT + SSL or APACHE+TOMCAT+SSL??

2002-07-23 Thread Power-Netz \(Schwarz\)


 Hello,

 I need to have SSL certificate . Web server is Tomcat4.04 serving
 static and
 dynamic pages. Should i upgrade it to APACHE+TOMCAT+SSL or TOMCAT+SSL will
 do? .

TOMCAT+SSL will do.


--
To unsubscribe, e-mail:   mailto:[EMAIL PROTECTED]
For additional commands, e-mail: mailto:[EMAIL PROTECTED]




TOMCAT + SSL or APACHE+TOMCAT+SSL??

2002-07-22 Thread Sujith Mathew

Hello,

I need to have SSL certificate . Web server is Tomcat4.04 serving static and
dynamic pages. Should i upgrade it to APACHE+TOMCAT+SSL or TOMCAT+SSL will
do? .

Is there any reason i should upgrade to APACHE+TOMCAT+SSL??

Thanks in advance

Sujith Mathew






--
To unsubscribe, e-mail:   mailto:[EMAIL PROTECTED]
For additional commands, e-mail: mailto:[EMAIL PROTECTED]




RE: Apache + Tomcat + SSL : Please help me on this

2002-02-28 Thread Anton Brazhnyk

Hi,

 -Original Message-
 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]
 Sent: Thursday, February 28, 2002 5:37 AM
 To: [EMAIL PROTECTED]
 Subject: Apache + Tomcat + SSL : Please help me on this
 
 
 Hi All,
 
 I have a problem in configuring SSL. I basically have two questions.
 
 1. I'm trying to configure Apache to use Tomcat as a servlet 
 container. My Apche server is 1.3.14-3 and i'm using Tomcat 4.02 
 and mod_webapp.so to integrate using WebAppConnection. I 
 basically followed the steps given as in following article
 
 http://dcb.sun.com/practices/howtos/tomcat_apache.jsp
 
 It worked very well and I managed to get Apache passing request 
 to the Tomcat. All works fine.
 
 Now my actual problem is SSL. How to get SSL work with Tomcat ? 
 Should I use Apaches SSL as recommended in Tomcat doc or Tomcats 
 SSL. What steps should I take ?
 

Can't help here, sorry. You should consult with Apache docs. And you have
to use Apache SSL, in fact AFAIK you won't be able to use Tomcat one in
that configuration.

 
 2. In a another machine I have Tomcat running as a standalone. I 
 tried to configure Tomcat SSL by following the how to document in 
 Tomcat. I am getting following error thrown in stdout in logs directory.
 
 Create Catalina server
 Exception during startup processing
 java.lang.reflect.InvocationTargetException: 
 java.lang.NoClassDefFoundError: javax/net/ServerSocketFactory
  at java.lang.Class.forName0(Native Method)
  at java.lang.reflect.Method.invoke(Native Method)
  ... ... ...
  at 
 org.apache.catalina.startup.BootstrapService.main(BootstrapService
 .java:428)
 
 As with my knowledge I precisely followed the steps given in doc, 
 but still have problem. as I uncomment the SSL HTTP/1.1 Connector 
 on port 8443 in server.xml, I could not get Tomcat started and 
 hence getting the exception thrown in stdout. 
 

It looks like you don't have JSSE installed in proper location.
It resides in $JAVA_HOME/jre/lib/ext in my case and
I believe it can live in $CATALINA_HOME/server/lib
or in $CATALINA_HOME/common/lib if your apps use it.

 
 I would highly appreciate if anyone can help me on this as I'm 
 tightly held up to finish my project on due date.
 
 Thank you,
 
 Zaid.
 
 

Anton

--
To unsubscribe:   mailto:[EMAIL PROTECTED]
For additional commands: mailto:[EMAIL PROTECTED]
Troubles with the list: mailto:[EMAIL PROTECTED]




Apache + Tomcat + SSL : Please help me on this

2002-02-27 Thread zaid

Hi All,

I have a problem in configuring SSL. I basically have two questions.

1. I'm trying to configure Apache to use Tomcat as a servlet container. My Apche 
server is 1.3.14-3 and i'm using Tomcat 4.02 and mod_webapp.so to integrate using 
WebAppConnection. I basically followed the steps given as in following article

http://dcb.sun.com/practices/howtos/tomcat_apache.jsp

It worked very well and I managed to get Apache passing request to the Tomcat. All 
works fine.

Now my actual problem is SSL. How to get SSL work with Tomcat ? Should I use Apaches 
SSL as recommended in Tomcat doc or Tomcats SSL. What steps should I take ?


2. In a another machine I have Tomcat running as a standalone. I tried to configure 
Tomcat SSL by following the how to document in Tomcat. I am getting following error 
thrown in stdout in logs directory.

Create Catalina server
Exception during startup processing
java.lang.reflect.InvocationTargetException: java.lang.NoClassDefFoundError: 
javax/net/ServerSocketFactory
 at java.lang.Class.forName0(Native Method)
 at java.lang.Class.forName(Unknown Source)
 at org.apache.catalina.util.xml.ObjectCreate.start(XmlMapper.java:616)
 at org.apache.catalina.util.xml.XmlMapper.matchStart(XmlMapper.java:412)
 at org.apache.catalina.util.xml.XmlMapper.startElement(XmlMapper.java:91)
 at org.xml.sax.helpers.XMLReaderAdapter.startElement(XMLReaderAdapter.java:329)
 at org.apache.xerces.parsers.SAXParser.startElement(SAXParser.java:1376)
 at 
org.apache.xerces.validators.common.XMLValidator.callStartElement(XMLValidator.java:1214)
 at 
org.apache.xerces.framework.XMLDocumentScanner.scanElement(XMLDocumentScanner.java:1806)
 at 
org.apache.xerces.framework.XMLDocumentScanner$ContentDispatcher.dispatch(XMLDocumentScanner.java:1182)
 at 
org.apache.xerces.framework.XMLDocumentScanner.parseSome(XMLDocumentScanner.java:381)
 at org.apache.xerces.framework.XMLParser.parse(XMLParser.java:1081)
 at org.xml.sax.helpers.XMLReaderAdapter.parse(XMLReaderAdapter.java:223)
 at javax.xml.parsers.SAXParser.parse(SAXParser.java:345)
 at javax.xml.parsers.SAXParser.parse(SAXParser.java:290)
 at org.apache.catalina.util.xml.XmlMapper.readXml(XmlMapper.java:228)
 at org.apache.catalina.startup.CatalinaService.load(CatalinaService.java:189)
 at org.apache.catalina.startup.CatalinaService.execute(CatalinaService.java:171)
 at org.apache.catalina.startup.Catalina.process(Catalina.java:179)
 at java.lang.reflect.Method.invoke(Native Method)
 at org.apache.catalina.startup.BootstrapService.main(BootstrapService.java:428)

As with my knowledge I precisely followed the steps given in doc, but still have 
problem. as I uncomment the SSL HTTP/1.1 Connector on port 8443 in server.xml, I could 
not get Tomcat started and hence getting the exception thrown in stdout. 


I would highly appreciate if anyone can help me on this as I'm tightly held up to 
finish my project on due date.

Thank you,

Zaid.




to be a bit more specific: using POST with SSL (was: mod_jk required for apache/tomcat/SSL?)

2001-08-28 Thread Amthauer, Heiner

Hi again,

sorry, my last question did not really explain my situation. I'll try it
again:
I did install Apache 1.3.20, Tomcat 3.2.3, openssl 0.9.6, mm 1.1.3 and
mod_ssl 2.8.4. I installed it according to a install-log of our company
(which is actually the same as yours, Jan :) and it all works fine with one
exception:
I CAN access servlets using the GET-method, however, I CANNOT access
servlets using the POST-method. When using the POST-method I geht some
cryptical charaters in the access-log togheter with a '501' and I get a
'Invalid method in request' in the error-log. Unfortunatelly I _haveto_ use
the POST-method, because we are sending objects to our servlets. Now, the
question is: 

What exactly do I need for sending objects to serlvets via SSL using the
POST-method? Is mod_jserv enough? Is it a configuration problem?

Any hints and help is greatly appreciated.

regards
Heiner


Dipl. Ing. Heiner Amthauer
Entwicklungsingenieur

T-Systems

debis Systemhaus Ulm GEI GmbH
Tel.: 0731 / 93 44 44 22
Fax.: 0731 / 93 44 44 09
Mobil.: 0178 / 42 69 33 5
mailto:[EMAIL PROTECTED]




Re: to be a bit more specific: using POST with SSL (was: mod_jk required for apache/tomcat/SSL?)

2001-08-28 Thread yilmaz

Hi Amthauer!
it seems that you didn't use doPost(Httpreq,res)  method in
your servlet, am i right ?
cheers :)
- Original Message -
From: Amthauer, Heiner [EMAIL PROTECTED]
To: 'tomcat' [EMAIL PROTECTED]
Sent: Tuesday, August 28, 2001 3:24 PM
Subject: to be a bit more specific: using POST with SSL (was: mod_jk
required for apache/tomcat/SSL?)


 Hi again,

 sorry, my last question did not really explain my situation. I'll try it
 again:
 I did install Apache 1.3.20, Tomcat 3.2.3, openssl 0.9.6, mm 1.1.3 and
 mod_ssl 2.8.4. I installed it according to a install-log of our company
 (which is actually the same as yours, Jan :) and it all works fine with
one
 exception:
 I CAN access servlets using the GET-method, however, I CANNOT access
 servlets using the POST-method. When using the POST-method I geht some
 cryptical charaters in the access-log togheter with a '501' and I get a
 'Invalid method in request' in the error-log. Unfortunatelly I _haveto_
use
 the POST-method, because we are sending objects to our servlets. Now, the
 question is:

 What exactly do I need for sending objects to serlvets via SSL using the
 POST-method? Is mod_jserv enough? Is it a configuration problem?

 Any hints and help is greatly appreciated.

 regards
 Heiner

 
 Dipl. Ing. Heiner Amthauer
 Entwicklungsingenieur

 T-Systems

 debis Systemhaus Ulm GEI GmbH
 Tel.: 0731 / 93 44 44 22
 Fax.: 0731 / 93 44 44 09
 Mobil.: 0178 / 42 69 33 5
 mailto:[EMAIL PROTECTED]
 






AW: to be a bit more specific: using POST with SSL (was: mod_jk required for apache/tomcat/SSL?)

2001-08-28 Thread Amthauer, Heiner

no, sorry, you are not. It is not a java source-code problem. The system is
all working perfectly well with normal http. And there are serveral
servlets, some being accessed with POST and some with GET - all work fine.
Until I switch to SSL. Afterwards I can no longer access the servlets with
POST.

greetings

 it seems that you didn't use 
 doPost(Httpreq,res)  method in
 your servlet, am i right ?
 cheers :)



mod_jk required for apache/tomcat/SSL?

2001-08-27 Thread Amthauer, Heiner

Hi there!

I want to use tomcat togehter with apache+mod_ssl. However, accessing my
servlets via SSL doesn't work at all, whereas using normal http requests it
all works fine. In any documentation about using SSL with apache/tomcat I
allways find configuration examples for mod_jk, but none for mod_jserv
(which I use). Is mod_jk a must when using apache/tomcat/SSL? If not, how
can it be done with mod_jserv?

Any fast help is greatly appreciated
regards
Heiner


Dipl. Ing. Heiner Amthauer
Entwicklungsingenieur

T-Systems

debis Systemhaus Ulm GEI GmbH
Tel.: 0731 / 93 44 44 22
Fax.: 0731 / 93 44 44 09
Mobil.: 0178 / 42 69 33 5
mailto:[EMAIL PROTECTED]





RE: mod_jk required for apache/tomcat/SSL?

2001-08-27 Thread GOMEZ Henri

Hi there!

I want to use tomcat togehter with apache+mod_ssl. However, 
accessing my
servlets via SSL doesn't work at all, whereas using normal 
http requests it
all works fine. In any documentation about using SSL with 
apache/tomcat I
allways find configuration examples for mod_jk, but none for mod_jserv
(which I use). Is mod_jk a must when using apache/tomcat/SSL? 
If not, how
can it be done with mod_jserv?

You should put the JkMount in the SSL Virtual area also :)



RE: mod_jk required for apache/tomcat/SSL?

2001-08-27 Thread GOMEZ Henri

In any documentation about using SSL with 
apache/tomcat I
allways find configuration examples for mod_jk, but none for mod_jserv
(which I use). Is mod_jk a must when using apache/tomcat/SSL? 
If not, how
can it be done with mod_jserv?

Yes, mod_jk will forward to your servlet/JSP 
the SSL information found in Apache 



Re: mod_jk required for apache/tomcat/SSL?

2001-08-27 Thread Jan Labanowski

Try http://www.ccl.net/cca/software/UNIX/apache/index.shtml

You may need to put the same stuff you have under default port 80
inside the block for virtual host 443 in httpd.conf


On Mon, 27 Aug 2001, Amthauer, Heiner wrote:

 Hi there!
 
 I want to use tomcat togehter with apache+mod_ssl. However, accessing my
 servlets via SSL doesn't work at all, whereas using normal http requests it
 all works fine. In any documentation about using SSL with apache/tomcat I
 allways find configuration examples for mod_jk, but none for mod_jserv
 (which I use). Is mod_jk a must when using apache/tomcat/SSL? If not, how
 can it be done with mod_jserv?
 
 Any fast help is greatly appreciated
 regards
 Heiner
 
 
 Dipl. Ing. Heiner Amthauer
 Entwicklungsingenieur
 
 T-Systems
 
 debis Systemhaus Ulm GEI GmbH
 Tel.: 0731 / 93 44 44 22
 Fax.: 0731 / 93 44 44 09
 Mobil.: 0178 / 42 69 33 5
 mailto:[EMAIL PROTECTED]
 
 

Jan K. Labanowski|phone: 614-292-9279,  FAX: 614-292-7168
Ohio Supercomputer Center|Internet: [EMAIL PROTECTED] 
1224 Kinnear Rd, |http://www.ccl.net/chemistry.html
Columbus, OH 43212-1163  |http://www.osc.edu/




Apache+Tomcat+SSL+IE5.5

2001-08-13 Thread java

Hi,
I have a web server with Apache (with SSL) + Tomcat (with ajp13)
Tomcat don't have a HTTP connector.
My application only use JSP-servlets(no static page).
It work perfectly with IE5.0 , Netscape 4 or Netscape 6
When I use IE5.5 to connect to my apache i have this message from IE :
(i have a french message, so it is my translation )

this page have secure elements and non-secure elements

Would you like view the non-secure elements ?

It's just a warning message but I would like to know if :

 _ IE5.5 is right (they are non-secured element in my JSP pages) or if
it is a bug.
 How to be sure ?

 _ if yes, Does It mean apache-SSL don't crypt my tomcat's JSP. (i have
the same message when i use ajp12 or ajp13 )

Thanks in advance
Fred





RE: Apache+Tomcat+SSL+IE5.5

2001-08-13 Thread Martin van den Bemt

It has to do with settings in the browser that it gives this message. If you
refere one thing to http in eg the header (eg external css stylesheet or
external js file) then this messag is given.

Mvgr,
Martin

 -Original Message-
 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of [EMAIL PROTECTED]
 Sent: Monday, August 13, 2001 9:08 PM
 To: [EMAIL PROTECTED]
 Subject: Apache+Tomcat+SSL+IE5.5


 Hi,
 I have a web server with Apache (with SSL) + Tomcat (with ajp13)
 Tomcat don't have a HTTP connector.
 My application only use JSP-servlets(no static page).
 It work perfectly with IE5.0 , Netscape 4 or Netscape 6
 When I use IE5.5 to connect to my apache i have this message from IE :
 (i have a french message, so it is my translation )

 this page have secure elements and non-secure elements

 Would you like view the non-secure elements ?

 It's just a warning message but I would like to know if :

  _ IE5.5 is right (they are non-secured element in my JSP pages) or if
 it is a bug.
  How to be sure ?

  _ if yes, Does It mean apache-SSL don't crypt my tomcat's
 JSP. (i have
 the same message when i use ajp12 or ajp13 )

 Thanks in advance
 Fred







Apache/Tomcat/SSL

2001-05-25 Thread Bhat, Mahesh



Hi

I have an Apache 
Server running under SSL. I have linked my Tomcat Server to it. Now I would like 
to refer to the SSL variables like SSL_CIPHER_USEKEYSIZE from my 
servlet code but don't know how to do it. 

Has anyone done 
that before ?

regards
mahesh


Important:

Internet communications are not necessarily secure and may be intercepted or changed after they are sent.
The Abbey National Group does not accept liability for any such changes. If you wish to confirm the origin or content of this communication, please contact the sender using an alternative means of communication.

This communication does not create or modify any contract.

If you are not the intended recipient of this communication you should destroy it without copying, disclosing or otherwise using its contents. Please notify the sender immediately of the error.

The Abbey National Group comprises Abbey National plc and its subsidiary group of companies.

Abbey National plc. Registered Office: Abbey House, Baker Street, London, NW1 6XL. Reg. No. 2294747.
Registered in England.



Apache + Tomcat + SSL

2001-02-06 Thread Phillip Kuzma

Ok i'm going to try and use ApacheSSL + Mod_JK + Tomcat.

I need to the ability to run https://localhost/servlet/Hello and
https://localhost/hello.jsp

Is this possible.. whats the best method.. I'd like to use apache-ssl +
mod_jk considering all the work i've done trying to get apache + mod_jk
I can probaly write a book on it.

Thanks in advance.
PLEASE CC ME any replies!!

Thanks
Phil


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, email: [EMAIL PROTECTED]




RE: Apache + Tomcat + SSL

2001-02-06 Thread Ritwick Dhar

It should work without any changes. By the time Tomcat gets it, the request
is already decoded.

-Original Message-
From: Phillip Kuzma [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, February 06, 2001 5:53 PM
To: Tomcat List
Subject: Apache + Tomcat + SSL


Ok i'm going to try and use ApacheSSL + Mod_JK + Tomcat.

I need to the ability to run https://localhost/servlet/Hello and
https://localhost/hello.jsp

Is this possible.. whats the best method.. I'd like to use apache-ssl +
mod_jk considering all the work i've done trying to get apache + mod_jk
I can probaly write a book on it.

Thanks in advance.
PLEASE CC ME any replies!!

Thanks
Phil


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, email: [EMAIL PROTECTED]

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, email: [EMAIL PROTECTED]




Apache + Tomcat + ssl

2000-11-07 Thread Richard Wooding

Hi,

We have successfuly configured Apache to work with Tomcat and Virtual Hosts.
However we would like to encrypt some of our JSP pages using ssl.
What is the best way to modify your Apache/Tomcat configuration so that you
can serve pages using the HTTPS protocol.

Regards
Richard Wooding


 Richard Wooding - Developer - Camara Consulting
e-mail: [EMAIL PROTECTED] icq: 7082626 msn: [EMAIL PROTECTED]

139 Hatfield Str, Gardens, Cape Town, 8001 Tel (Work): +27 (21) 4652138