Re: mod_jk or mod_proxy_ajp - encryption benefits?‏

2008-03-07 Thread David Cassidy
James, You could put the stunnel into a while loop that makes it. perhaps you could send yourself an email each time it closed ? stunnel is probably the easiest to setup. I had written a secure version of mod_ajp for apache 1.3 (ie years ago) which did the whole ssl encryption of the traffic

RE: mod_jk or mod_proxy_ajp - encryption benefits ?‏

2008-03-06 Thread James Ellis
I have done some goog'ling on IPSec and VPN and I have found three possibilities: 1) OpenSSH and Port Forwarding 2) OpenVPN 3) Stunnel (thanks little voice) What concerns me about all three options is error handling. If my OpenSSH or OpenVPN or Stunnel connection failed/timed out, the

Re: mod_jk or mod_proxy_ajp - encryption benefits?‏

2008-03-06 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 James, James Ellis wrote: | I have done some goog'ling on IPSec and VPN and I have found three | possibilities: | | 1) OpenSSH and Port Forwarding | | 2) OpenVPN | | 3) Stunnel (thanks little voice) | | What concerns me about all three options is

Re: mod_jk or mod_proxy_ajp - encryption benefits?

2008-03-05 Thread David Cassidy
cough stunnel /cough On Mon, 2008-03-03 at 18:39 -0800, David Rees wrote: On Mon, Mar 3, 2008 at 9:26 AM, James Ellis [EMAIL PROTECTED] wrote: Do you think that little hollow voice can clarify how IPSec would solve this problem by giving an example of a software that I could implement to

Re: mod_jk or mod_proxy_ajp - encryption benefits?

2008-03-03 Thread Mark H. Wood
A hollow voice whispers, IPSec. -- Mark H. Wood, Lead System Programmer [EMAIL PROTECTED] Typically when a software vendor says that a product is intuitive he means the exact opposite. pgpXHb0gRtjuo.pgp Description: PGP signature

RE: mod_jk or mod_proxy_ajp - encryption benefits?

2008-03-03 Thread James Ellis
or mod_proxy_ajp - encryption benefits? A hollow voice whispers, IPSec. -- Mark H. Wood, Lead System Programmer [EMAIL PROTECTED] Typically when a software vendor says that a product is intuitive he means the exact opposite.

Re: mod_jk or mod_proxy_ajp - encryption benefits?

2008-03-03 Thread David Rees
On Mon, Mar 3, 2008 at 9:26 AM, James Ellis [EMAIL PROTECTED] wrote: Do you think that little hollow voice can clarify how IPSec would solve this problem by giving an example of a software that I could implement to accomplish this? Google IPSec and VPN and you will find your answer. -Dave

mod_jk or mod_proxy_ajp - encryption benefits?

2008-03-02 Thread James Ellis
I know that mod_jk is the battle tested connector between Apache and Tomcat, but as I understand it the SSL connection generally terminates at the Apache web server and the traffic between Apache and Tomcat (to the AJP connector) is unencrypted. Two questions: 1) Does mod_proxy_ajp provide

Re: mod_jk or mod_proxy_ajp - encryption benefits?

2008-03-02 Thread Rainer Jung
James Ellis schrieb: I know that mod_jk is the battle tested connector between Apache and Tomcat, but as I understand it the SSL connection generally terminates at the Apache web server and the traffic between Apache and Tomcat (to the AJP connector) is unencrypted. Two questions: 1) Does

RE: mod_jk or mod_proxy_ajp - encryption benefits?

2008-03-02 Thread James Ellis
Inline: Date: Sun, 2 Mar 2008 18:16:24 +0100 From: [EMAIL PROTECTED] To: users@tomcat.apache.org Subject: Re: mod_jk or mod_proxy_ajp - encryption benefits? James Ellis schrieb: I know that mod_jk is the battle tested connector between Apache and Tomcat, but as I understand it the SSL

Re: mod_jk or mod_proxy_ajp - encryption benefits?

2008-03-02 Thread Bill Barker
James Ellis [EMAIL PROTECTED] wrote in message news:[EMAIL PROTECTED] Inline: Date: Sun, 2 Mar 2008 18:16:24 +0100 From: [EMAIL PROTECTED] To: users@tomcat.apache.org Subject: Re: mod_jk or mod_proxy_ajp - encryption benefits? James Ellis schrieb: I know that mod_jk is the battle

RE: mod_jk or mod_proxy_ajp - encryption benefits?

2008-03-02 Thread James Ellis
Inline: To: users@tomcat.apache.org From: [EMAIL PROTECTED] Subject: Re: mod_jk or mod_proxy_ajp - encryption benefits? Date: Sun, 2 Mar 2008 15:31:21 -0800 James Ellis [EMAIL PROTECTED] wrote in message news:[EMAIL PROTECTED] Inline: Date: Sun, 2 Mar 2008 18:16:24 +0100 From

Re: mod_jk or mod_proxy_ajp - encryption benefits?

2008-03-02 Thread Martin Gainty
: Sunday, March 02, 2008 7:15 PM Subject: RE: mod_jk or mod_proxy_ajp - encryption benefits? Inline: To: users@tomcat.apache.org From: [EMAIL PROTECTED] Subject: Re: mod_jk or mod_proxy_ajp - encryption benefits? Date: Sun, 2 Mar 2008 15:31:21 -0800 James Ellis [EMAIL PROTECTED] wrote

Re: mod_jk or mod_proxy_ajp - encryption benefits?

2008-03-02 Thread David Rees
On Sun, Mar 2, 2008 at 6:42 PM, Martin Gainty [EMAIL PROTECTED] wrote: PCI-DSS calls for encryption on all channels where payment information will be transmitted is the configuration described here non PCI-DSS compliant? No, PCI-DSS calls for encryption of card data across open, public