<andrewaclt> Is it possible to set up Tomcat to do ajp over ssl? (Not https?) (Tomcat: 5.5.9 OS: Linux Java: 1.4.2)
* Looking up andrewaclt user info...
<pfn> ajp doesn't understand the notion of "ssl"
<andrewaclt> You can't tunnel ajp through ssl?
<pfn> ajp just has a flag to indicate whether the initial connection is http or https
<pfn> andrewaclt, no, and the question is, "why"
<pfn> andrewaclt, you could do something like 'stunnel' to do that...
<andrewaclt> What if the server is across the internet between apache and tomcat?
<pfn> then you're doing something wrong
<pfn> because that isn't how you should do it
<pfn> ajp is intended to be used within a lan only
<pfn> answers: vpn, figure out how to leverage stunnel, etc.
<andrewaclt> Well, what if it's an untrusted lan?
<pfn> in that case, I would remove apache from the picture altogether
<pfn> or proxy to tomcat via https instead of ajp
* Looking up pfn user info...
<andrewaclt> So my only options are stunnel or https for proxying with apache then?
<pfn> yes
<pfn> I mean, if you wanted to proxy secure requests from another apache, what would you use...
<andrewaclt> https. I'm just trying to test the functionality of mod_proxy_ajp.
<pfn> anyway, like I said, ajp doesn't inherently support ssl