Can Certificate System 8 work behind AJP?
Issue
- There is a need for CS components to communicate on standard ports below 1024
-
Elevated privileges for those ports are not allowed, and violate Common Criteria certification
-
Apache Java Proxy will allow client auth, mod_proxy will not
- Changing the ports in Certificate System's sever.xml will violate Common Criteria certification
Environment
- Red Hat Certificate System 8
- Red Hat Enterprise Linux 5
- Apache httpd server
- Mod_jk
- Mod_nss
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase of over 48,000 articles and solutions.
Close
Welcome! Check out the Getting Started with Red Hat page for quick tours and guides for common tasks.