-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Bill,
On 3/4/14, 2:14 PM, Bill Davidson wrote: > On 3/4/2014 11:01 AM, Christopher Schultz wrote: >> On 3/4/14, 1:26 PM, Bill Davidson wrote: >>> I realized that I forgot a lot of info: >>> >>> Tomcat 7.0.47 on RHEL 5.10 Apache httpd 2.2.25 >>> >>> It worked fine with Tomcat 6.0.37 >>> >>> The applet is bit-for-bit identical. It's built with Java 1.1 >>> compatibility mode. >>> >>> It's some sort of combination of the load balancer and Tomcat 7 >>> not getting along with each other, but there's nothing to >>> indicate that in catalina.out or mod_jk.log or error.log. >> So you have client (applet) -> Cisco LB -> Tomcat? Or, are there >> other components in the mix? Does Cisco LB speak AJP13? > > See above. I have Apache httpd 2.2.25 in there. It's the same > httpd I was using with Tomcat 6. > >> >> What component is handling the SSL handshake on the server side? > > Apache httpd. > >> Just to clarify, the applet works when connecting /directly/ to >> Tomcat - -- without the load-balancer in between? How can the >> client (applet) connect directly to Tomcat if you only have an >> AJP connector? > > I don't think it can connect directly to Tomcat. Only have the > AJP connector and it's only enabled on the loopback, which the load > balancer has no access to. > > Only httpd can talk to Tomcat; by design. Aah, sorry, I had missed that. So, the only change was Tomcat? No upgrade to mod_jk or anything like that? OpenSSL upgrade? Upgraded Java on the client? Everything else *absolutely* the same? If you aren't using SSL at all in Tomcat, then Tomcat isn't likely to be the problem, here. Can other command-line tools connect -- take the applet out of the picture? Try something like curl, wget, or even OpenSSL's s_client tool. s_client will give you lots of good information about the SSL connection state, too. - -chris -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 Comment: GPGTools - http://gpgtools.org Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ iQIcBAEBCAAGBQJTFifwAAoJEBzwKT+lPKRY2CYP/RmfLmBtQfQfWkwYq/bmdhEy wW4/JqcP+q6tJHHWwZy5Ns6q88ojMzOaTHUEAVDf2at//GAYqhDo9zhfd/sVrdlj 2fdI7Bwo+m6YuvuM4MsBKCorhQtfwlLhYziUFFOthR4tbM/J1KQA7Xi0Zst6O0B+ gmfSEv4+boa6UvUATUg5qNFI5CWUQ7HM9Zft9uNbQRwm8sAOLXbojRc2SCX8ZOK4 vJnSc+mULrJflK9B/+IN4EqbK0sDwSkflBCr8SIqYIhT+k2zcAXrJn3wx9ft3Vru xK5U/9tut6/WZ+VO+z1ND36kO9+/jwvQCMNZWGT+0oPKe2qBvI0PRn1V47TE+8sG 6ZjY1MZjsGFBoCH0ujWORP0Hwv3Cw/yf4YLznipfgl326+15uqGNnbNXqPU/cQU7 7+1UE1S5gnmOHv8rf+yz+CoIChP3Acyyv402GcyOcxB4LKWfk8RWhkITC1ihS0v4 C90cwPf0awEKcAMv0371QSXX/KNbg3NAmssP44e/8CUQopTfnfQ6Z6N9jQbxf/8h eW/TTY7lh81mrpypzYoShIkbktzPYMLkAzNBqP/I29XwJxG+unf93pTXiCrjrJCq ZLemxOij6N3Ffzkx0xbYJlpL9cMugenV0cCrYi81AkDpsN6uVjaw8840hVRTzvcq W/KSNdTJJLmqT1G8o+DY =RYpm -----END PGP SIGNATURE----- --------------------------------------------------------------------- To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
