Originally posted by Ben Souther: SSL has to be set up and configured in tomcat in order for your app to use it.
My question is how can i use SSL without Tomcat?.Is there any way?.I mean only programatically in serverside?.Wat's the best practice for authenticating?.To use Tomcat or not to use?.I know using tomcat is simple.But when deployment,Not relying much in container will better for easy and portable deployment.
So i seek experienced advice on this matter.
Thanks for the links ben.
MM [ January 26, 2005: Message edited by: Murasoli Maran ]
SSL and authentication are not necessarily tied together.
You can do all the authentication in your application (programatic) or use the authentication provided by Tomcat (declarative).
SSL However, needs to be set up in the server/container you are using. You will not be able to do this ahead of time for the people to whom you ship your app. Only the owner of a domain will be able to buy a certificate from the major CAs.