Re: current best practices for Tomcat with SSL on port 443

2019-02-08 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Garret, On 2/8/19 08:27, Garret Wilson wrote: > On 2/7/2019 9:54 PM, Christopher Schultz wrote: >> … I would argue that adding Apache httpd into the mix (where is >> it not already there) is more complicated than using Let's >> Encrypt with Tomcat.

Re: current best practices for Tomcat with SSL on port 443

2019-02-08 Thread Garret Wilson
On 2/7/2019 9:54 PM, Christopher Schultz wrote: … I would argue that adding Apache httpd into the mix (where is it not already there) is more complicated than using Let's Encrypt with Tomcat. OK, I guess I didn't figure in the part about adding/configuring the connector. But still there are a

Re: current best practices for Tomcat with SSL on port 443

2019-02-07 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Garret, On 2/7/19 12:22, Garret Wilson wrote: > On 2/7/2019 3:13 PM, Christopher Schultz wrote: >> … Have a look at this presentation: >> https://people.apache.org/~schultz/ApacheCon%20NA%202018/Let's%20Encr ypt >> >> %20Apache%20Tomcat.pdf > > T

Re: current best practices for Tomcat with SSL on port 443

2019-02-07 Thread Garret Wilson
On 2/7/2019 3:13 PM, Christopher Schultz wrote: … Have a look at this presentation: https://people.apache.org/~schultz/ApacheCon%20NA%202018/Let's%20Encrypt %20Apache%20Tomcat.pdf The presentation gets two thumbs up, specifically: * Great corny grammar ambiguity joke on the title page. * The

Re: current best practices for Tomcat with SSL on port 443

2019-02-07 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Garret, On 2/7/19 11:45, Garret Wilson wrote: > Hi, everyone. In the computer course I'm writing I'm using Tomcat > for the server. (Students learn how to set up CentOS and everything > from scratch. Currently the course has them using Tomcat runnin

Re: current best practices for Tomcat with SSL on port 443

2019-02-07 Thread John Larsen
You can use apache with mod_jk and then just setup the ssl through apache and tomcat will use the 443 port through apache. If you want to use letencrypt you need to add JkUnMount for /.well-known/* directory so that when you run lets encrypt it can create and get to this directory through apache.

current best practices for Tomcat with SSL on port 443

2019-02-07 Thread Garret Wilson
Hi, everyone. In the computer course I'm writing I'm using Tomcat for the server. (Students learn how to set up CentOS and everything from scratch. Currently the course has them using Tomcat running on port 8080.) I'm going back to write the section on security. I want students to learn to set