MG>Frederich,
MG>comments interspersed
> From: ch...@christopherschultz.net
> To: users@tomcat.apache.org
> Subject: Re: [OT] redirecting people to maintenance mode
>
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> Fred,
>
> On 8/24/12 12:02 PM, Fred Janon wrote:
> > Excellent, thanks for all these suggestions. I never really
> > understood why Tomcat standalone would be that much slower than
> > something else serving files like you pointed it out. So good
> > things to look at and try out. thanks for the SSL pointer as well,
> > I need it.
>
> Since you are using SSL, I would highly recommend using the APR
> connector with both sendFile and SSL enabled. Note that you have to
> completely change your SSL certificate configuration. IMO, OpenSSL
> configuration is *much* easier because you don't have to deal with the
> nightmare that is Java's 'keytool' with all the aliases and odd
> formats and stuff. Give me PEM-encoded concatenated keys any day of
> the week.
MG>dont forget with PEM you will need to deploy a single-rooted PKI
MG>http://en.wikipedia.org/wiki/Privacy_Enhanced_Mail
MG>IMHO: If the certificate from the CA Authority is a X.509 cert use DER
MG>http://en.wikipedia.org/wiki/Distinguished_Encoding_Rules
> As always, benchmark your own environment and don't let anybody else
> tell you what is or is not faster.
MG>PEM is faster only if you have a single-rooted PKI Server-client
operational..UGH..
I'm fairly confident you'll see a
> significant performance improvement when switching to APR for both
> static content (in general)
MG>anyone can shark the static content
>and non-static content (over SSL).
MG>non-static content you'll want to protect
>
> Good luck.
MG>Viel Gluck
>
> - -chris
MG>--Martin
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG/MacGPG2 v2.0.17 (Darwin)
> Comment: GPGTools - http://gpgtools.org
> Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/
>
> iEYEARECAAYFAlA32KoACgkQ9CaO5/Lv0PBEbwCgpok8Jnns7LWMrDpcMFIiDff4
> f1QAoKBP4s9DLfm4cVCgSxnGc44o7WGT
> =5wIj
> -----END PGP SIGNATURE-----
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
> For additional commands, e-mail: users-h...@tomcat.apache.org
>
