在tomcat和Apache HTTP服务器之间配置SSL

Question

We have a security requirement to configure SSL between tomcat and apache http server. I am using mod_jk for connection between httpd and tomcat servers.

I couldn't find the correct document which explains my situation. If anyone knows, pl. help me.

Answer 1

Short answer, you need to use the HTTP protocol instead of AJP.

HTTP supports encrypted communications (ie HTTPS), but AJP does not. If you want to stick with AJP, you'd need to use encryption at a lower level, like a VPN or encrypted tunnel, and then route your AJP traffic over the encrypted network.

If you switch to HTTP, you can use HTTPD, mod_proxy and mod_ssl to encrypt connections between HTTPD & Tomcat. The standard documentation on this is pretty good.

http://httpd.apache.org/docs/current/mod/mod_proxy.html#proxypass http://httpd.apache.org/docs/current/mod/mod_ssl.html#sslproxyengine