Re: How to Configure Tomcat 7.0 for SSL

2011-09-19 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Gene, On 9/16/2011 4:43 PM, Gene Waters wrote: > SSLCertificateFile="webapps\.cert" > SSLCertificateKeyFile="webapps\.key" /> You definitely don't want those files there: an easy misconfiguration could result in those files being remotely readable.

RE: How to Configure Tomcat 7.0 for SSL

2011-09-19 Thread Gene Waters
From: Marvin Addison [marvin.addi...@gmail.com] Sent: Monday, September 19, 2011 9:36 AM To: Tomcat Users List Subject: Re: How to Configure Tomcat 7.0 for SSL > SSLEngine="on" There's no such attribute for this connector. The attribute you want is SSLEnabled=&qu

Re: How to Configure Tomcat 7.0 for SSL

2011-09-19 Thread Marvin Addison
> SSLEngine="on" There's no such attribute for this connector. The attribute you want is SSLEnabled="true". I would also recommend the following attributes for security-conscious deployments: SSLProtocol="SSLv3+TLSv1" SSLCipherSuite="!ADH:HIGH:MEDIUM:-SSLv2" If you continue to have trouble, po