-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

> -----Original Message-----
> From: Wills, Mike N. (TC) [mailto:[EMAIL PROTECTED]]
> Sent: Monday, August 12, 2002 4:38 PM
> To: 'Tomcat Users List'
> Subject: RE: SSL Connection Tomcat and Apache
> 
> 
> What about the transmittions between Apache and Tomcat? I realize if they
> are on the same machine it isn't a problem, but what about if it is on a
> different machine? 

On Tue, Aug 13, 2002 at 11:27:21AM -0400, Pooleery, Manoj wrote:
> i have it working on different machines.  Tomcat on one machine and apache
> on another.  SSL will work irrespective of the machines, as long as both of
> the machines can see each other.(i mean on the same network).

i'm not sure this answers the question.  i am also interested in this.
let me draw a picture:


client <- talks on 443 ssl to -> apache <- talks ??? on port 8009 -> tomcat

the problem being that if the webser gets encrypted stuff and then
passes it to tomcat in the clear, someone could get the unencrypted
info from the second conversation.

- -- 
Peter Abplanalp

Email:   [EMAIL PROTECTED]
PGP:     pgp.mit.edu
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.7 (GNU/Linux)

iD8DBQE9WTV2ggA8sH0iRXQRAkilAKCKx8C0vWcqoumcfNTvzDuJlxIq1gCgrgmG
d2jhrrg8fU6GXKVNuL2osnk=
=v/fr
-----END PGP SIGNATURE-----

--
To unsubscribe, e-mail:   <mailto:[EMAIL PROTECTED]>
For additional commands, e-mail: <mailto:[EMAIL PROTECTED]>

Reply via email to