I don't know yet--it's the next thing I'll need to figure out.
On 9/22/2014 5:55 AM, Christopher Schultz wrote:
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256
Borislav,
On 9/20/14 11:57 PM, Borislav Trifonov wrote:
Switched to a configuration where Tomcat is now front-ended by
Nginx acting
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256
Borislav,
On 9/20/14 11:57 PM, Borislav Trifonov wrote:
Switched to a configuration where Tomcat is now front-ended by
Nginx acting as a load balancer, so now the problem has moved to a
different spot.
Just curious: how does Nginx do this?
Christopher Schultz wrote:
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256
Borislav,
On 9/20/14 11:57 PM, Borislav Trifonov wrote:
Switched to a configuration where Tomcat is now front-ended by
Nginx acting as a load balancer, so now the problem has moved to a
different spot.
Just curious:
Switched to a configuration where Tomcat is now front-ended by Nginx acting as
a load balancer, so now the problem has moved to a different spot.
As for the PSK: the computational expense of key exchange (we have many
frequent short lived connections) is a con that brings zero benefit to our
On 18/09/2014 20:15, Borislav Trifonov wrote:
We need to use pre-shared keys, not certificates. TLS supports PSK,
but how does one set this up in Tomcat? All the guides for SSL/TLS in
Tomcat I've found talk about setting up certificates.
PSK ciphers are not supported JSSE provider provided by
778 688 6139
F: +1 604 694 0001
From: Igor Cicimov [icici...@gmail.com]
Sent: Thursday, September 18, 2014 3:46 PM
To: Tomcat Users List
Subject: Re: How to set up TLS-PSK with Tomcat
On 19/09/2014 5:16 AM, Borislav Trifonov btrifo...@macroh.com wrote
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256
Borislav,
On 9/19/14 3:47 PM, Borislav Trifonov wrote:
Are you saying Tomcat can use OpenSSL instead of Java for TLS?
Yes. You need to use the tcnative library (Tomcat Native on the
Tomcat web site) along with libapr and libssl. Under a default
On 19/09/2014 5:16 AM, Borislav Trifonov btrifo...@macroh.com wrote:
We need to use pre-shared keys, not certificates. TLS supports PSK, but
how does one set this up in Tomcat? All the guides for SSL/TLS in Tomcat
I've found talk about setting up certificates.
Set sslProtocol=TLS and
