Re: SSL port number

2007-08-21 Thread Markus Schönhaber
Stephen Caine wrote: >> Stephen Caine wrote: >> >>> A simple way to restart Tomcat from a non-root user would be nice. >> Interesting wish. A non-root user with the right to control my >> system services is approximately the last thing I would want to see. > > Well, if you can set a 'user' opt

Re: SSL port number

2007-08-20 Thread Stephen Caine
Markus, Stephen Caine wrote: A simple way to restart Tomcat from a non-root user would be nice. Interesting wish. A non-root user with the right to control my system services is approximately the last thing I would want to see. Well, if you can set a 'user' option for startup, why not s

Re: SSL port number

2007-08-20 Thread Markus Schönhaber
Stephen Caine wrote: > A simple way to restart Tomcat from a non-root user would be nice. Interesting wish. A non-root user with the right to control my system services is approximately the last thing I would want to see. Regards mks ---

Re: SSL port number

2007-08-20 Thread Stephen Caine
Well, since you asked... ... or use jsvc which lets Tomcat drop privileges after binding to a privileged port and which is distributed with the Tomcat archives. Did you use it? did you like it? We have no reason but the port to give the tomcat-user any privilege (even if only at booting);

Re: SSL port number

2007-08-20 Thread Markus Schönhaber
Lorenzo Cerini wrote: > Markus Schönhaber wrote: >> ... or use jsvc which lets Tomcat drop privileges after binding to a >> privileged port and which is distributed with the Tomcat archives. >> > Did you use it? > did you like it? Yes. Yes. > We have no reason but the port to give the tomcat

Re: SSL port number

2007-08-20 Thread David Smith
The commons-daemon project (better known on this list as jsvc) will allow startup as a non-root user and access to ports below 1024. See http://jakarta.apache.org/commons/daemon for details. --David Lorenzo Cerini wrote: Markus Schönhaber wrote: Stephen Caine wrote: We use Tomcat SSL

Re: SSL port number

2007-08-20 Thread Lorenzo Cerini
Markus Schönhaber wrote: Lorenzo Cerini schrieb: Markus Schönhaber wrote: Stephen Caine wrote: We use Tomcat SSL without Apache and it has been very stable. The only issue has been the using port 8443 as some firewalls block access. Why don't you tell Tomca

Re: SSL port number

2007-08-20 Thread Markus Schönhaber
Stephen Caine schrieb: > I previously posted a question about port redirection which was > answered. I was referring to that previous post. Well, there seems to be something wrong with my crystal ball. I'll have to get this damned thing checked ;-) Regards mks

Re: SSL port number

2007-08-20 Thread Markus Schönhaber
Lorenzo Cerini schrieb: > Markus Schönhaber wrote: >> Stephen Caine wrote: >> >> >>> We use Tomcat SSL without Apache and it has been very stable. The >>> only issue has been the using port 8443 as some firewalls block access. >>> >> Why don't you tell Tomcat to use the port you want it

Re: SSL port number (was: Re: Tomcat SSL/HTTPS Performance vs Apache)

2007-08-20 Thread Stephen Caine
Markus, I previously posted a question about port redirection which was answered. I was referring to that previous post. Stephen We use Tomcat SSL without Apache and it has been very stable. The only issue has been the using port 8443 as some firewalls block access. Why don't you t

Re: SSL port number

2007-08-20 Thread Lorenzo Cerini
Markus Schönhaber wrote: Stephen Caine wrote: We use Tomcat SSL without Apache and it has been very stable. The only issue has been the using port 8443 as some firewalls block access. Why don't you tell Tomcat to use the port you want it to use - for You cannot access port below

SSL port number (was: Re: Tomcat SSL/HTTPS Performance vs Apache)

2007-08-20 Thread Markus Schönhaber
Stephen Caine wrote: > We use Tomcat SSL without Apache and it has been very stable. The > only issue has been the using port 8443 as some firewalls block access. Why don't you tell Tomcat to use the port you want it to use - for example 443? Regards mks ---