Re: iis and tomcat question

From: George Hester (hesterloli_at_hotmail.com)
Date: 02/27/04 

Date: Fri, 27 Feb 2004 17:35:27 -0500

Maybe try the tomcat newserver where the developers are?

Newsserver: news.gmane.org
Newsgroup: gmane.comp.jakarta.tomcat.user 

-- 
George Hester
__________________________________
"John McClain" <jm42163jm@yahoo.com> wrote in message news:Okp0BTW$DHA.2212@TK2MSFTNGP10.phx.gbl...
> What we want to do is have round trip, SSL encryption when our clients use
> our webapps AND not have the port number as part of the URL. There are 3
> scenarios:
> 
> 
> 
> 1)      Our client is using IIS to serve their current webapps - some of
> these apps could be employing SSL. How do we insure that JSP's and Servlets
> that are redirected to Tomcat are talking with IIS securely - encrypted? I
> understand that typical redirection from IIS to tomcat is always decrypted,
> cleartext.
> 
> 
> 
> 2)      Our client is using IIS to serve their current webapps - none of
> their apps employ ssl. Can (and should) we setup IIS and Tomcat so that SSL
> requests go directly to Tomcat (Tomcat talks to client directly when SSL
> request issued) and standard HTTP requests goto IIS?
> 
> 
> 
> 3)      Our client does NOT want to use IIS - how do you setup tomcat to be
> a secure webapp server? (this is not as big a problem as numbers 1 and 2)
> 
>

Relevant Pages

  • Re: IIS6.0 + SSL Breaks down!
    ... Ok, I asked the IIS SSL developer, and he gave me the details. ... bad public specification on SSL make SSL Client Certificates ...
    (microsoft.public.inetserver.iis)
  • Re: Client Certificates - Force a fresh authentication
    ... State cache of IE seems to keep sending the same client certificate ... I can't see anything I can do server side through IIS or a framework ... The only thing I've found of use is to clear the client's SSL State ...
    (microsoft.public.inetserver.iis.security)
  • Failure posting files to iis6.0 using ssl client authentication
    ... server authentication or no ssl at all work fine. ... The bug does not occur with IIS 5.0. ... If client certificates are enabled on individual directories or files ... The IIS worker process receives enough data to parse request headers, ...
    (microsoft.public.inetserver.iis.security)
  • Re: IIS6.0 + SSL Breaks down!
    ... Well, about me saying I was using client certificates, I did it in the first ... me question now seems to be: how can I increase the "SSL ReadAhead" ... IIS needs to complete SSL ...
    (microsoft.public.inetserver.iis)
  • Re: Presenting complete cert chain from IIS
    ... At the client side I ... > receive only the leaf certificate used by IIS. ... It is common for SSL servers to omit the CA's root cert, ...
    (sci.crypt)
Loading