I am using Apaches MOD SSL to do the certificate enforcement. It then uses
the mod proxy to push the certificate info over AJP to my tomcat instance.
tomcat does not have SSL enables at the container level but my application
seems to pick up the certificate info jsut fine this way... 

yes i mean that the browser is prompting the user for their client
certificate repeatedly, roughly once every 10 minutes, this is the problem i
have been struggling with.

thanks!

matt



Rainer Jung-3 wrote:
> 
> On 04.05.2009 03:27, matt617 wrote:
>> when using apache 2.2, tomcat 5.5.20 on top of java 1.5.10+ using Apache
>> with
>> Mod_SSL and Mod_Proxy to connect the Incoming http session through AJP to
>> Tomcat my browser repeatidly prompts me for a ceritficate. 3 times at the
>> beginning, then about 3 times every 10 minutes. does anyone know why?
>> should
>> i be posting this in the apache user group? is it an apache issues or
>> tomcat
>> issue?
> 
> It depends on what component is doing the certificate check, the Apache
> web server or Tomcat? I assume by "prompts me for a certificate" you
> mean you are using client certificates and not simply some confirmation
> that the communication should proceed although the server certificate is
> insecure etc.
> 
> Are you forcing client certificates by some mod_ssl configuration (then
> it's an Apache web server topic) or by some security constraint or
> similar in your web app or Tomcat?
> 
> Regards,
> 
> Rainer
> 
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
> For additional commands, e-mail: users-h...@tomcat.apache.org
> 
> 
> 

-- 
View this message in context: 
http://www.nabble.com/Tomcat-over-AJP-with-Apache-in-front-SSL-Issues-tp23361836p24965802.html
Sent from the Tomcat - User mailing list archive at Nabble.com.


---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Reply via email to