Path: csiph.com!v102.xanadu-bbs.net!xanadu-bbs.net!news.glorb.com!Xl.tags.giganews.com!border1.nntp.dca1.giganews.com!nntp.giganews.com!buffer1.nntp.dca1.giganews.com!local2.nntp.dca.giganews.com!news.giganews.com.POSTED!not-for-mail NNTP-Posting-Date: Sat, 20 Dec 2014 16:26:05 -0600 Date: Sun, 21 Dec 2014 00:19:34 +0200 From: Donkey Hottie User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:31.0) Gecko/20100101 Thunderbird/31.3.0 MIME-Version: 1.0 Newsgroups: comp.lang.java.programmer Subject: Re: Tomcat ssl certificates, any experience? References: <5492e2de$0$2838$e4fe514c@news.xs4all.nl> In-Reply-To: <5492e2de$0$2838$e4fe514c@news.xs4all.nl> Content-Type: text/plain; charset=windows-1252 Content-Transfer-Encoding: 7bit Message-ID: Lines: 11 X-Usenet-Provider: http://www.giganews.com X-Trace: sv3-zkUQcszfh5bZvU2PyD9Tso4h1PWtK1sOguVgUY7B3vHppM/ps7OUqQJc3RKxhMUJROs8PkrnYtm+C9t!zoVrvCFTDPpHEVPMs7SyFzlifVFe7yE41CWb+0bZci7wQUutQplj9w7TJCZ7NJsGMBR5gw== X-Complaints-To: abuse@giganews.com X-DMCA-Notifications: http://www.giganews.com/info/dmca.html X-Abuse-and-DMCA-Info: Please be sure to forward a copy of ALL headers X-Abuse-and-DMCA-Info: Otherwise we will be unable to process your complaint properly X-Postfilter: 1.3.40 X-Original-Bytes: 1724 Xref: csiph.com comp.lang.java.programmer:30603 On 18.12.2014 16:21, Silvio wrote: > Have you considered setting up a simple reverse proxy in front of your > web server that handles the SSL part? It will have the additional > advantage of giving you some load distribution options. NGINX would do > fine and is a breeze to setup, including the SSL part. That works fine, or Pound, which is a dedicated reverse proxy and application firewall. I have implemented SSL on Java servers using Pound, and my colleague has done it using nginx. Both work fine.