Hi: I am not an expert but just a thought. Apache is proxing to tomcat (I assume that both at the same server) if this comunication is internal, the browser (user) just contact apache thru an enchripted comunication (https) and apache determines what to do, am I right? why do you need the internal comnication to be enchripted as well? If you make it posible (double enchription) you probably add double security to the user, a single one is not enought? And of course slowing the connection down. hth, arian
________________________________ From: Jason Lanpher [mailto:[EMAIL PROTECTED] Sent: Thu 6/14/2007 9:23 PM To: users Subject: SSL Tomcat and Apache. Hi all, I have a question for all of you network admins out there. I am wondering if it is possible to share an ssl key between both Apache 2.X and Tomcat 5.X if they are connected via mod jk. Is this possible or does each server have to have its own ssl key? Thanks in advance for all of you thoughts on the matter. Jason Lanpher
--------------------------------------------------------------------- To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]