Tomcat 6: what are the risks of not using Security Manager

Hello, I'm migrating existing applications to Tomcat and setting Tomcat up as described in the 'Security Configuration Benchmark for Apache Tomcat 5.5/6.0' of the Center of Internet Security. The benchmark recommends enabling the Security Manager. However, I'm experiencing that none of the apps

Re: Tomcat with certificate on load balances - prevending redirect https/http

ESSAGE- > Hash: SHA1 > > Jan-Willem, > > On 12/13/11 9:27 AM, jwklomp wrote: >> I'm having a problem that the all request get redirected from https >> to http. > > Do you mean that requests to https://host/path get redirected (with a > 30x response) to http:

Re: Tomcat with certificate on load balances - prevending redirect https/http

Thanks! I'll try it. But are you not supposed to add a certificate to Tomcat if you start using a secure channel? Jan-Willem Klomp Mikolaj Rydzewski-2 wrote: > > On Tue, 13 Dec 2011 06:27:55 -0800 (PST), jwklomp wrote: > >> I'm having a problem that the all request

Tomcat with certificate on load balances - prevending redirect https/http

Hi, We have Tomcat running with IIS (via the Tomcat ISAPI plugin) behind a load balancer. We have an application that should use https. The Certificate has been implemented on the load balancer, because this is our new company standard. I'm having a problem that the all request get redirected