Question about ssl

2022-03-26 Thread John Dale (DB2DOM)
Greetings;

Can you help me understand why Tomcat's SSL handling is so much faster
than hand rolling it on a regular socket?

Sincerely,

John

-
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org



AW: Apache : Redirect web requests - Keep the same host in the URL

2022-03-26 Thread Thomas Hoffmann (Speed4Trade GmbH)


> -Ursprüngliche Nachricht-
> Von: olivier giorgi 
> Gesendet: Samstag, 26. März 2022 12:49
> An: Tomcat Users List 
> Betreff: Apache : Redirect web requests - Keep the same host in the URL
> 
> 
> Hello all,
> 
> The goal is that users willcontinue to connect to "https:/server1"but will
> actually browse to "https://server2;.
> 
> I have successfullyredirected from "server1" to "server2" via apache/http,
> but the url seen in the browserchanges.
>  In the following configuration, how can I make this redirectioncompletely
> transparent to end users? 
> ServerNameserver2
> 
> ServerAliasserver2
> 
> ErrorLog"C:\Apache24\logs/Error.log"
> 
> TransferLog"C:\Apache24\logs/access.log"
> 
> LogLevelwarn
> 
>  SSLEngineon
> 
> SSLProxyEngineOn
> 
>  SSLCertificateFile"E:\certificat\proxy\server2.cer"
> 
> SSLCertificateKeyFile"E:\certificat\proxy\server2.dsone.3ds.com_self.key"
> 
>  ProxyPass/3dpassport "https://server1/3dpassport;
> 
> ProxyPassReverse /3dpassport "https://server1/3dpassport;
> 
> 
> 
> 
> 
> 
> 
> Good week-end !


Hello,
I think "redirect" is the wrong way or method. Redirect will always tell the 
browser to go to another URL.
If you want to have a transparent behaviour, you need to just proxy the request 
to the target server.
E.g. on Server1 runs Apache webserver and the webserver will proxy the incoming 
request to server2 in the background.
SSL must be handled by server1 because apache must be able to read the request. 
Depending on the environment / security
the target server can use http or https.
Also take care of websockets, if they are used. They need additional rules.

Maybe it's more a question about Apache and less about Tomcat.

Greetings,
Thomas


Apache : Redirect web requests - Keep the same host in the URL

2022-03-26 Thread olivier giorgi

Hello all,

The goal is that users willcontinue to connect to "https:/server1"but will 
actually browse to "https://server2;.

I have successfullyredirected from "server1" to "server2" via apache/http, but 
the url seen in the browserchanges. 
 In the following configuration, how can I make this redirectioncompletely 
transparent to end users? 
ServerNameserver2

ServerAliasserver2

ErrorLog"C:\Apache24\logs/Error.log"

TransferLog"C:\Apache24\logs/access.log"

LogLevelwarn

 SSLEngineon

SSLProxyEngineOn

 SSLCertificateFile"E:\certificat\proxy\server2.cer"

SSLCertificateKeyFile"E:\certificat\proxy\server2.dsone.3ds.com_self.key"

 ProxyPass/3dpassport "https://server1/3dpassport;

ProxyPassReverse /3dpassport "https://server1/3dpassport;

 



 

Good week-end !