-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Gene,
On 9/16/2011 4:43 PM, Gene Waters wrote:
> SSLCertificateFile="webapps\.cert"
> SSLCertificateKeyFile="webapps\.key" />
You definitely don't want those files there: an easy misconfiguration
could result in those files being remotely readable.
From: Marvin Addison [marvin.addi...@gmail.com]
Sent: Monday, September 19, 2011 9:36 AM
To: Tomcat Users List
Subject: Re: How to Configure Tomcat 7.0 for SSL
> SSLEngine="on"
There's no such attribute for this connector. The attribute you want
is SSLEnabled=&qu
> SSLEngine="on"
There's no such attribute for this connector. The attribute you want
is SSLEnabled="true". I would also recommend the following attributes
for security-conscious deployments:
SSLProtocol="SSLv3+TLSv1"
SSLCipherSuite="!ADH:HIGH:MEDIUM:-SSLv2"
If you continue to have trouble, po