Re: secure application using Tomcat

2005-10-14 Thread Mark
I would recommend placing Apache in front of Tomcat. You can also use mod_security on Apache to further lock down your application. I have found that if you want security, do not use Tomcat by itself. I never liked the idea of placing keystore passwords in XML files. At least Apache prompts you for

Re: secure application using Tomcat

2005-10-14 Thread Mark
I would recommend placing Apache in front of Tomcat. You can also use mod_security on Apache to further lock down your application. I have found that if you want security, do not use Tomcat by itself. I never liked the idea of placing keystore passwords in XML files. At least Apache prompts you for

Re: secure application using Tomcat

2005-10-14 Thread Mark
I would recommend placing Apache in front of Tomcat. You can also use mod_security on Apache to further lock down your application. I have found that if you want security, do not use Tomcat by itself. I never liked the idea of placing keystore passwords in XML files. At least Apache prompts you for

secure application using Tomcat

2005-10-14 Thread jshamsi
Hello! I am a newbie to Tomcat. I have configured Tomcat as a standalone web server for HTTP and HTTPS. and now I am trying to develop a secure aplication (using SSL) which will do user authentication and perform user specific actions. I need some help/tutorial (JAVA) which can guide me to authne