On 21/02/2011 22:19, Jason Pyeron wrote:
>> -----Original Message-----
>> From: Mark Thomas 
>> Sent: Monday, February 21, 2011 17:15
>> To: Tomcat Users List
>> Subject: Re: Secure AJP over ssl
>>
>> On 21/02/2011 21:31, Jason Pyeron wrote:
>>> Does (or could) tomcat 5.5 support encrypted AJP?
>>
>> No.
>>
>>> Would I be best off using stunnel?
>>
>> Also, no.
>>
>> Use mod_proxy_http and proxy over https.
> 
> Then we would loose the is_secure handling of AJP, as well as the client
> certificates of the web application clients. That is the purpose of
> mod_proxy_ajp, among others.

No you wouldn't. That all works (with a little more configuration) with
mod_proxy_http.

Mark



---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Reply via email to