IIS SSL Encryption handshake information

From: John McClain (jm42163jm_at_yahoo.com)
Date: 11/22/05

  • Next message: David Wang [Msft]: "Re: IIS SSL Encryption handshake information" 
    Date: Tue, 22 Nov 2005 13:41:09 -0800

    We have a servlet that is served by Tomcat. IIS is employed to redirect ot
    Tomcat via AJP. IIS is also SSL enabled as our data is sensistive.

    I am setting IIS to use SSL encryption on the default website. I have a
    redirector that forwards request to Tomcat

    I wish to call a jsp in Tomcat and pass SSL encrypted data. BUT, to start
    the SSL handshake off, I am making a jsp request with the data I wish to be
    SSL encrypted.

    My question is

    If I call a jsp from a browser and pass it some parameters that need to be
    sent encrypted, do the parameters get SSL encrypted BEFORE they are sent, or
    are they sent clear text, then the SSL Handshake, then all other data sent
    is encrypted?

  • Next message: David Wang [Msft]: "Re: IIS SSL Encryption handshake information"

    Relevant Pages

    • iis and tomcat question
      ... What we want to do is have round trip, SSL encryption when our clients use ... our webapps AND not have the port number as part of the URL. ... that are redirected to Tomcat are talking with IIS securely - encrypted? ...
      (microsoft.public.inetserver.iis)
    • iis tomcat question???
      ... What we want to do is have round trip, SSL encryption when our clients use ... our webapps AND not have the port number as part of the URL. ... that are redirected to Tomcat are talking with IIS securely - encrypted? ...
      (microsoft.public.inetserver.iis.security)
    • tomcat - postgresDatasource SSL
      ... Ich muss von einem Tomcat5 per SSL auf eine Postgres-Datenbank zugreifen. ... Tomcat scheint den keystore auch zu verwenden ...
      (de.comp.lang.java)
    • Re: How to Implement a Single Logon Across Multiple Web Servers
      ... you cannot have a 'single logon' accros the network. ... There is a 'trick' to workaround the SSL + CPU stress. ... For SSL encryption, ... exist hardware based encrypters that you 'store' before IIS. ...
      (microsoft.public.inetserver.iis.security)
    • Re: iis and tomcat question
      ... Our client is using IIS to serve their current webapps - some of ... > these apps could be employing SSL. ... > that are redirected to Tomcat are talking with IIS securely - encrypted? ...
      (microsoft.public.inetserver.iis)