Chapter 10: HTTP Connectors . xpoweredBy: If set

Chapter 10: HTTP Connectors . xpoweredBy: If set to true(the default value is false), an X-Powered-Byheader is output in servlet-generated responses returned by the Connector. The value of the header is Servlet/2.5, as shown in the following sample HTTP response header: HTTP/1.1 200 OK X-Powered-By: Servlet/2.5 Content-Type: text/html Content-Length: 1437 Date: Thu, 07 Aug 2007 17:25:52 GMT Server: Apache-Coyote/1.1 In addition to these attributes, there are others that are specific to SSL Connectors. These are valid only if the secureattribute is set to true, and are discussed next. Configuring Tomcat 6 for SSL The Connector for the Catalina instance that supports HTTPS connections must have its secureattribute set to trueand its schemeattribute set to https. Unlike Tomcat 4. x, no Factory element is required for SSL-related configuration, although it is still supported for backward compatibility. The new SSL-related Connector attributes are as follows: . algorithm: Specifies the certificate encoding algorithm to use. This defaults to SunX509. . ciphers: A comma-separated list of encryption ciphers. . clientAuth: Can be set to either trueor false(the default is false). When set to true , the client connection would need to present a valid certificate. However, if clientAuthis set to false, and the Web resource being requested is protected by CLIENT-CERTauthentication, the latter would take precedence (that is, the client would still need to present a certificate). . keystoreFile: Specifies the pathname to the keystore file. The keystore file contains the server s public and private keys in the form of certificates. keystoreFiledefaults to .keystorein the user s home directory. The home directory varies by operating system (for example, /home/ user_namein Linux; and C:Documents and Settings windows user name for Windows). . keystorePass: Should be set to the password required to access the keystoreFile . The default password is changeit. . keystoreType: Specifies the keystore file type. It defaults to JKS (Java Keystore). This format is SUN s format supported by the underlying Java SE platform implementation and need not be changed if you are setting up a new Java keystore. If your underlying operating system already has a keystore in another format, and you have installed a JCE provider that supports that format in your JDK, you may be able to use it. For example, pkcs11 and pkcs12 are supported by some JDK and operating system combinations. . sslProtocol: This indicates which version of the SSL protocol to use (the default value is TLS). The default value is fine for most configurations, as TLS is essentially SSL3. For backward compatibility with some older JVM, if you are running on old Java VMs, you may need to change this to SSL. Following is an example Connector with SSL configuration. This configuration is already present in the $CATALINA_HOME/conf/server.xml file, but is commented out. Note that if the SSL port (8443) is

If you looking for unlimited one inclusive web hosting plan please check unlimited web hosting website.

Comments are closed.