Forum Moderators: phranque

Message Too Old, No Replies

All pages over SSL

How easy is it to do this?

         

delboy1978uk

10:30 am on Sep 5, 2005 (gmt 0)

10+ Year Member



Hi folks! Todays big topic:

I am creating an intranet site containing sensitive data which my boss wants secured.

My pages are JSP, which is on Apache Tomcat on port 8080.
I read that SSL on Tomcat is pants because the Java Virtual machine is S...L...O...W...

I was advised to have Apache installed, and get Apache to do all the SSL and forward all requests to Tomcat.

So right now the setup is....

Apache port 80 brings up default Apache page
Tomcat port 8080 brings up intranet site

Which genius out there can sort this in two minutes?
First post with the correct answer wins thanks and gratitude, which apparently is better than hard earned cash!

Cheers folks! :-)

jdMorgan

2:53 pm on Sep 5, 2005 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member



delboy1978uk,

Welcome to WebmasterWorld!

Here's a link [httpd.apache.org] to get you started.

Also, since this problem includes non-Apache elements, you may have better luck if you research the problem a bit, and then ask specific questions here and in the Website Technology [webmasterworld.com] forum.

Today is a holiday in the U.S. and things are likely to be slow around here until 2 P.M. GMT on Tuesday.

Jim

delboy1978uk

12:22 am on Sep 6, 2005 (gmt 0)

10+ Year Member



Thanks, I tried posting these in different forums, wasn't sure which would be best to post in. I'll check out the links.

So far, I am under the impression that in order to solve this problem, I need to do the following

download and Install JK2 connector (i've done this part)
to connect apache with tomcat

forward requests from apache to tomcat

download and Install mod_ssl.so or something
(or is this installed already on apache2?)

create a certificate

set up apache so that all requests are ssl

delboy1978uk

2:40 pm on Sep 7, 2005 (gmt 0)

10+ Year Member



Hi folks! Todays big topic:
I am creating an intranet site containing sensitive data which my boss wants secured.

My pages are JSP, which is on Apache Tomcat on port 8080.
I read that SSL on Tomcat is pants because the Java Virtual machine is S...L...O...W...

I was advised to have Apache installed, and get Apache to do all the SSL and forward all requests to Tomcat.

So right now the setup is....

Apache port 80 brings up default Apache page
Tomcat port 8080 brings up intranet site

Which genius out there can sort this in two minutes?
First post with the correct answer wins thanks and gratitude, which apparently is better than hard earned cash!

Cheers folks! :-)

delboy1978uk

2:45 pm on Sep 7, 2005 (gmt 0)

10+ Year Member



OK Right now here is the score

Apache2 on port 80
Tomcat on port 8080
MySQL on port 3306
JDK 5
JK2 Connector linking Apache and Tomcat
JConnector for Java to MySQL
Open SSL installed

okay, need to know:

certificates? how to make with OpenSSL
certificates - where to put them once I have them
All pages over SSL - How to tell Apache to do this
Forward requests to Tomcat - how to tell Apache to do this