Passing the SSL key size from Apache HTTP Server to Apache Tomcat

Products

• Pivotal Web Server

Issue/Introduction

This article provides information on how to pass the key size of an SSL key from Apache HTTP Server to Apache Tomcat.

Resolution

If the Apache HTTP Server is connecting to an Apache Tomcat server via mod_jk using the ajp13 protocol, Servlet API 2.3 requires that the SSL key size be forwarded.

You can configure the Apache HTTP Server to forward the SSL key size using the JkOptions directive.

To configure the Apache HTTP Server to forward the SSL key size, add this entry to the httpd.conf or httpsd.conf file:

JkOptions          +ForwardKeySize

Additional Information

For more information, see The Apache Tomcat Connector - Webserver HowTo.