Re: Client cert authentication

2010-04-26 Thread acastanheira2001
Thanks again Mark, I think it will be difficult to move to Tomcat 6 soon. If I change mod_proxy to mod_jk, does mod_jk passes the client cert to Tomcat 5.5? Thank you, Andre Mark Thomas wrote: On 22/04/2010 20:00, acastanheira2001 wrote: Thanks Mark, I use mod_proxy (ProxyPass

Re: Client cert authentication

2010-04-22 Thread acastanheira2001
); } } } Thanks in advance for your attention. markt-2 wrote: On 19/04/2010 13:05, acastanheira2001 wrote: Hi, I have an apache server in front of Tomcat/Jboss, the former receives the client cert and does revocation list and trust validation. I need to pass the client cert to Tomcat

Client cert authentication

2010-04-19 Thread acastanheira2001
Hi, I have an apache server in front of Tomcat/Jboss, the former receives the client cert and does revocation list and trust validation. I need to pass the client cert to Tomcat only to check the SubjectAltNames. As far as trust accreditation is done by apache, does Tomcat need to have a

Re: How to hide x-poweredBY response header

2009-08-04 Thread acastanheira2001
Mark, Could you tell me what Tomcat doc is? Thanks for your atention, Andre Mark Thomas-18 wrote: acastanheira2001 wrote: Hi, Although I´ve set false to xpoweredBy tag, it continues to appear in response headers. init-param param-namexpoweredBy/param-name

Re: How to hide x-poweredBY response header

2009-08-04 Thread acastanheira2001
to consult the JBOSS docs since they configure it in a different manner. -Tim acastanheira2001 wrote: Mark, Could you tell me what Tomcat doc is? Thanks for your atention, Andre Mark Thomas-18 wrote: acastanheira2001 wrote: Hi, Although I´ve set false to xpoweredBy tag

How to hide x-poweredBY response header

2009-08-03 Thread acastanheira2001
Hi, Although I´ve set false to xpoweredBy tag, it continues to appear in response headers. init-param param-namexpoweredBy/param-name param-valuefalse/param-value /init-param How to hide the following information? X-Powered-By: Servlet 2.4; JBoss-4.2.0.GA_CP02 (build:

useHttpOnly - how to?

2009-07-16 Thread acastanheira2001
Hi, I´ve set useHttpOnly=true in /opt/jboss/server/myserver/deploy/jboss-web.deployer/context.xml. Context cookies=true crossContext=true useHttpOnly=true /Context But the cookie continues to respond to javascript commands. Any ideas appreciated. Thanks, Andre X-Powered-By: Servlet

Re: useHttpOnly - how to?

2009-07-16 Thread acastanheira2001
Thanks for your reply. It appears on http://tomcat.apache.org/tomcat-6.0-doc/config/context.html; but not in http://tomcat.apache.org/tomcat-5.5-doc/config/context.html;. Andre Konstantin Kolinko wrote: X-Powered-By: Servlet 2.4; JBoss-4.2.0.GA_CP02 (build: SVNTag=JBPAPP_4_2_0_GA_CP02

How to use the error page config of Apache in tomcat?

2009-07-13 Thread acastanheira2001
Hi, Apache has an internationalized error page system configured on errors.conf. I use apache and tomcat on the same machine, so I would like that tomcat use the same error page config. Any ideas? Thanks, Andre -- View this message in context: