Re: Simple SSL question

2022-08-12 Thread Christopher Schultz
Peter, On 8/11/22 17:00, Peter Kreuser wrote: I have tried all the fancy new cert options and they are cool. And I do agree that it's more readable. What would be useful would be one sample how to transfer a simple "old" config to SSLHostConfig. Let's see if a PNG attachment makes it to the

RE: Simple SSL question

2022-08-11 Thread jonmcalexander
ware | Infrastructure Solutions > > > > 8080 Cobblestone Rd | Urbandale, IA 50322 > > MAC: F4469-010 > > Tel 515-988-2508 | Cell 515-988-2508 > > > > jonmcalexan...@wellsfargo.com > > This message may contain confidential and/or privileged information. If you >

Re: Simple SSL question

2022-08-11 Thread Mark Thomas
On 11/08/2022 22:00, Peter Kreuser wrote: What would be useful would be one sample how to transfer a simple "old" config to SSLHostConfig. That would take away the fear to get going. In another thread I said, that it may be a lot of work to migrate a lot of tomcat instances. But I guess most

Re: Simple SSL question

2022-08-11 Thread logo
ge- >> From: Peter Kreuser >> Sent: Thursday, August 11, 2022 4:00 PM >> To: Tomcat Users List >> Subject: Re: Simple SSL question >> >> >> Jon and Chris, >> >> >>> Am 11.08.2022 um 19:33 schrieb Christopher Schultz >&

RE: Simple SSL question

2022-08-11 Thread jonmcalexander
cooperation. > -Original Message- > From: Peter Kreuser > Sent: Thursday, August 11, 2022 4:00 PM > To: Tomcat Users List > Subject: Re: Simple SSL question > > > Jon and Chris, > > > > Am 11.08.2022 um 19:33 schrieb Christopher Schultz > :

Re: Simple SSL question

2022-08-11 Thread Peter Kreuser
I'm sure you'll sleep better at night after you've > switched. > > -chris > >>> -Original Message- >>> From: Christopher Schultz >>> Sent: Thursday, August 11, 2022 11:29 AM >>> To: users@tomcat.apache.org >>> Subject: Re:

Re: Simple SSL question

2022-08-11 Thread Christopher Schultz
mple, you can configure both RSA and EC certificates for a single host. That's just not possible with the one-attribute-to-rule-them-all configuration where everything is on the element. -chris -Original Message- From: Mark Thomas Sent: Wednesday, August 10, 2022 2:43 PM To: us

RE: Simple SSL question

2022-08-11 Thread jonmcalexander
-Original Message- > From: Christopher Schultz > Sent: Thursday, August 11, 2022 11:29 AM > To: users@tomcat.apache.org > Subject: Re: Simple SSL question > > Jon, > > On 8/11/22 11:22, jonmcalexan...@wellsfargo.com.INVALID wrote: > > Is there a "name"

Re: Simple SSL question

2022-08-11 Thread Christopher Schultz
a single host. That's just not possible with the one-attribute-to-rule-them-all configuration where everything is on the element. -chris -Original Message- From: Mark Thomas Sent: Wednesday, August 10, 2022 2:43 PM To: users@tomcat.apache.org Subject: Re: Simple SSL question On 1

RE: Simple SSL question

2022-08-11 Thread jonmcalexander
rom: Mark Thomas > Sent: Wednesday, August 10, 2022 2:43 PM > To: users@tomcat.apache.org > Subject: Re: Simple SSL question > > On 10/08/2022 19:22, jonmcalexan...@wellsfargo.com.INVALID wrote: > > Ok, I'm asking a rather simple, stupid (in my opinion) question, but here >

RE: Simple SSL question

2022-08-10 Thread jonmcalexander
Thanks Mark!!! > -Original Message- > From: Mark Thomas > Sent: Wednesday, August 10, 2022 2:43 PM > To: users@tomcat.apache.org > Subject: Re: Simple SSL question > > On 10/08/2022 19:22, jonmcalexan...@wellsfargo.com.INVALID wrote: > > Ok, I'm askin

Re: Simple SSL question

2022-08-10 Thread Mark Thomas
On 10/08/2022 19:22, jonmcalexan...@wellsfargo.com.INVALID wrote: Ok, I'm asking a rather simple, stupid (in my opinion) question, but here goes: What is the best practice form of connector for SSL. Is it the old-school coyote connector or the connector with the section? The old style isn'

Simple SSL question

2022-08-10 Thread jonmcalexander
Ok, I'm asking a rather simple, stupid (in my opinion) question, but here goes: What is the best practice form of connector for SSL. Is it the old-school coyote connector or the connector with the section? Are the two interchangeable, or does the SSLHostConfig one rely on openssl and won't wor