AJP doesn't use SSL, never has, so I'm not sure what the problem would be
the only way to get SSL between apache and tomcat, is to use mod_proxy
Filip
c. wrote:
Thanks Filip,
We've always had the need for SSL, and our config worked without any
changes
when I put AJP in the mix. It doesn't, however, work with proxy http.
On 3/23/07, Filip Hanik - Dev Lists <[EMAIL PROTECTED]> wrote:
in my last email I forgot one
SSLProxyMachineCertificateFile <--
SSLProxyEngine
SSLProxyMachineCertificatePath
SSLEngine
SSLProxyProtocol,
SSLProxyCipherSuite
c. wrote:
> Filip, thanks for the info, I'll listen to anyone with good advice.
> So you
> recommend mod_proxy_http over mod_jk?
>
> Is it the same basic setup as mod_proxy_ajp? Looking at the doc (
> http://httpd.apache.org/docs/2.0/mod/mod_proxy_http.html) it doesn't
give
> much info.
>
> c.
>
> On 3/23/07, Filip Hanik - Dev Lists <[EMAIL PROTECTED]> wrote:
>>
>> Christopher Schultz wrote:
>> > -----BEGIN PGP SIGNED MESSAGE-----
>> > Hash: SHA1
>> >
>> > Filip,
>> >
>> > Filip Hanik - Dev Lists wrote:
>> >
>> >> I'd recommend moving to mod_proxy_http, it will be easier for
you to
>> debug.
>> >>
>> >
>> > Bah! :(
>> >
>> that sounds knowledgeable :)
>> >
>> >> the error below seems to be more of a problem with apache
>> (mod_proxy_ajp)
>> >> then with tomcat, tomcat is simply trying to write a message, but
the
>> >> connection is no longer valid.
>> >>
>> >
>> > The problem is that the connection has been closed at some point.
It's
>> > usually because the user hit the STOP button on their browser and
>> closed
>> > the connection.
>> >
>> > You can pretty much ignore these errors.
>> >
>> yes, and instead filling up the logs
>> > No need to switch connectors.
>> >
>> actually, if you are gonna use AJP, use mod_jk, mod_proxy_ajp is not
>> moving in the same pace.
>> however, I'd recommend using HTTP, the HTTP connectors on tomcat are
>> finely tuned,
>> if there ever is a problem in the communication, you'll just put in a
>> sniffer and can see it direct.
>>
>> but hey, don't listen to me :)
>> Filip
>> > - -chris
>> >
>> > -----BEGIN PGP SIGNATURE-----
>> > Version: GnuPG v1.4.7 (MingW32)
>> > Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
>> >
>> > iD8DBQFGBA1E9CaO5/Lv0PARAqGMAJ90+P79Kt1Vhhm+a+aeNvdupzhJ4QCcDhzn
>> > 58umlhiChNndLXSputpG5rk=
>> > =IxYN
>> > -----END PGP SIGNATURE-----
>> >
>> >
---------------------------------------------------------------------
>> > To start a new topic, e-mail: users@tomcat.apache.org
>> > To unsubscribe, e-mail: [EMAIL PROTECTED]
>> > For additional commands, e-mail: [EMAIL PROTECTED]
>> >
>> >
>> >
>> >
>>
>>
>> ---------------------------------------------------------------------
>> To start a new topic, e-mail: users@tomcat.apache.org
>> To unsubscribe, e-mail: [EMAIL PROTECTED]
>> For additional commands, e-mail: [EMAIL PROTECTED]
>>
>>
>
>
------------------------------------------------------------------------
>
> No virus found in this incoming message.
> Checked by AVG Free Edition.
> Version: 7.5.446 / Virus Database: 268.18.17/730 - Release Date:
3/22/2007 7:44 AM
>
---------------------------------------------------------------------
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
------------------------------------------------------------------------
No virus found in this incoming message.
Checked by AVG Free Edition.
Version: 7.5.446 / Virus Database: 268.18.17/730 - Release Date: 3/22/2007 7:44
AM
---------------------------------------------------------------------
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
