Sunday, September 9, 2012

SSL Offloading with mod_jk part 3

Document  Version 1.0
   Copyright © 2012-2013 beijing.beijing.012@gmail.com

Keywords:
SSLOffloading SSL-Offloading, SSL Termination, Apache, Tomcat, mod_jk configuration, multiple vhosts, multiple SSL certificates one ip



Till now we have successfuly protected our TestWevSec20 Web application with SSL.

The 2 servlets are accessed via following links:

http://localhost:8080/TestWebSec20/HalloNormal

And 

http://localhost:8080/TestWebSec20/secure/HalloSec, which is redirected to 
https://localhost:8443/TestWebSec20/secure/HalloSec

However, for a real web page, we expect to visit the page via a "real" domain name like "www.sample.com", and NOT localhost. We also don't want browser show http/https ports to user. 

So we need to hide the application behinde some proxy/load_balancer... what ever, make the "TestWevSec20" to be accessed using following URLs: 

http://www.ahaha.com/TestWebSec20/HalloNormal

And 

http://www.ahaha.com/TestWebSec20/secure/HalloSec

For this purpose, we need to front Tomcat with Apache and mod_jk


SSL Offloading with mod_jk part 4
part1 part2 part5 part6

No comments:

Post a Comment