| [66] | 1 | <html><head><META http-equiv="Content-Type" content="text/html; charset=iso-8859-1"><title>Apache Tomcat 6.0 - Apache Portable Runtime (APR) based Native library for Tomcat</title><meta value="Remy Maucherat" name="author"><meta value="" name="email"></head><body vlink="#525D76" alink="#525D76" link="#525D76" text="#000000" bgcolor="#ffffff"><table cellspacing="0" width="100%" border="0"><!--PAGE HEADER--><tr><td><!--PROJECT LOGO--><a href="http://tomcat.apache.org/"><img border="0" alt=" |
|---|
| 2 | The Apache Tomcat Servlet/JSP Container |
|---|
| 3 | " align="right" src="./images/tomcat.gif"></a></td><td><font face="arial,helvetica,sanserif"><h1>Apache Tomcat 6.0</h1></font></td><td><!--APACHE LOGO--><a href="http://www.apache.org/"><img border="0" alt="Apache Logo" align="right" src="./images/asf-logo.gif"></a></td></tr></table><table cellspacing="4" width="100%" border="0"><!--HEADER SEPARATOR--><tr><td colspan="2"><hr size="1" noshade></td></tr><tr><!--LEFT SIDE NAVIGATION--><td nowrap="true" valign="top" width="20%"><p><strong>Links</strong></p><ul><li><a href="index.html">Docs Home</a></li><li><a href="http://wiki.apache.org/tomcat/FAQ">FAQ</a></li></ul><p><strong>User Guide</strong></p><ul><li><a href="introduction.html">1) Introduction</a></li><li><a href="setup.html">2) Setup</a></li><li><a href="appdev/index.html">3) First webapp</a></li><li><a href="deployer-howto.html">4) Deployer</a></li><li><a href="manager-howto.html">5) Manager</a></li><li><a href="realm-howto.html">6) Realms and AAA</a></li><li><a href="security-manager-howto.html">7) Security Manager</a></li><li><a href="jndi-resources-howto.html">8) JNDI Resources</a></li><li><a href="jndi-datasource-examples-howto.html">9) JDBC DataSources</a></li><li><a href="class-loader-howto.html">10) Classloading</a></li><li><a href="jasper-howto.html">11) JSPs</a></li><li><a href="ssl-howto.html">12) SSL</a></li><li><a href="ssi-howto.html">13) SSI</a></li><li><a href="cgi-howto.html">14) CGI</a></li><li><a href="proxy-howto.html">15) Proxy Support</a></li><li><a href="mbeans-descriptor-howto.html">16) MBean Descriptor</a></li><li><a href="default-servlet.html">17) Default Servlet</a></li><li><a href="cluster-howto.html">18) Clustering</a></li><li><a href="balancer-howto.html">19) Load Balancer</a></li><li><a href="connectors.html">20) Connectors</a></li><li><a href="monitoring.html">21) Monitoring and Management</a></li><li><a href="logging.html">22) Logging</a></li><li><a href="apr.html">23) APR/Native</a></li><li><a href="virtual-hosting-howto.html">24) Virtual Hosting</a></li><li><a href="aio.html">25) Advanced IO</a></li><li><a href="extras.html">26) Additional Components</a></li><li><a href="maven-jars.html">27) Mavenized</a></li></ul><p><strong>Reference</strong></p><ul><li><a href="RELEASE-NOTES.txt">Release Notes</a></li><li><a href="config/index.html">Configuration</a></li><li><a href="api/index.html">Javadocs</a></li><li><a href="http://tomcat.apache.org/connectors-doc/">JK 1.2 Documentation</a></li></ul><p><strong>Apache Tomcat Development</strong></p><ul><li><a href="building.html">Building</a></li><li><a href="changelog.html">Changelog</a></li><li><a href="http://wiki.apache.org/tomcat/TomcatVersions">Status</a></li><li><a href="developers.html">Developers</a></li><li><a href="architecture/index.html">Architecture</a></li><li><a href="funcspecs/index.html">Functional Specs.</a></li></ul></td><!--RIGHT SIDE MAIN BODY--><td align="left" valign="top" width="80%"><table cellspacing="4" width="100%" border="0"><tr><td valign="top" align="left"><h1>Apache Tomcat 6.0</h1><h2>Apache Portable Runtime (APR) based Native library for Tomcat</h2></td><td nowrap="true" valign="top" align="right"><small><a href="printer/apr.html"><img alt="Printer Friendly Version" border="0" src="./images/printer.gif"><br>print-friendly<br>version |
|---|
| 4 | </a></small></td></tr></table><table cellpadding="2" cellspacing="0" border="0"><tr><td bgcolor="#525D76"><font face="arial,helvetica.sanserif" color="#ffffff"><a name="Introduction"><strong>Introduction</strong></a></font></td></tr><tr><td><blockquote> |
|---|
| 5 | |
|---|
| 6 | <p> |
|---|
| 7 | Tomcat can use the <a href="http://apr.apache.org/">Apache Portable Runtime</a> to |
|---|
| 8 | provide superior scalability, performance, and better integration with native server |
|---|
| 9 | technologies. The Apache Portable Runtime is a highly portable library that is at |
|---|
| 10 | the heart of Apache HTTP Server 2.x. APR has many uses, including access to advanced IO |
|---|
| 11 | functionality (such as sendfile, epoll and OpenSSL), OS level functionality (random number |
|---|
| 12 | generation, system status, etc), and native process handling (shared memory, NT |
|---|
| 13 | pipes and Unix sockets). |
|---|
| 14 | </p> |
|---|
| 15 | |
|---|
| 16 | <p> |
|---|
| 17 | These features allows making Tomcat a general purpose webserver, will enable much better |
|---|
| 18 | integration with other native web technologies, and overall make Java much more viable as |
|---|
| 19 | a full fledged webserver platform rather than simply a backend focused technology. |
|---|
| 20 | </p> |
|---|
| 21 | |
|---|
| 22 | </blockquote></td></tr></table><table cellpadding="2" cellspacing="0" border="0"><tr><td bgcolor="#525D76"><font face="arial,helvetica.sanserif" color="#ffffff"><a name="Installation"><strong>Installation</strong></a></font></td></tr><tr><td><blockquote> |
|---|
| 23 | |
|---|
| 24 | <p> |
|---|
| 25 | APR support requires three main native components to be installed: |
|---|
| 26 | <ul> |
|---|
| 27 | <li>APR library</li> |
|---|
| 28 | <li>JNI wrappers for APR used by Tomcat (libtcnative)</li> |
|---|
| 29 | <li>OpenSSL libraries</li> |
|---|
| 30 | </ul> |
|---|
| 31 | </p> |
|---|
| 32 | |
|---|
| 33 | <table cellpadding="2" cellspacing="0" border="0"><tr><td bgcolor="#828DA6"><font face="arial,helvetica.sanserif" color="#ffffff"><a name="Windows"><strong>Windows</strong></a></font></td></tr><tr><td><blockquote> |
|---|
| 34 | |
|---|
| 35 | <p> |
|---|
| 36 | Windows binaries are provided for tcnative-1, which is a statically compiled .dll which includes |
|---|
| 37 | OpenSSL and APR. It can be downloaded from <a href="http://tomcat.heanet.ie/native/">here</a> |
|---|
| 38 | as 32bit or AMD x86-64 binaries. |
|---|
| 39 | In security conscious production environments, it is recommended to use separate shared dlls |
|---|
| 40 | for OpenSSL, APR, and libtcnative-1, and update them as needed according to security bulletins. |
|---|
| 41 | Windows OpenSSL binaries are linked from the <a href="http://www.openssl.org">Official OpenSSL |
|---|
| 42 | website</a> (see related/binaries). |
|---|
| 43 | </p> |
|---|
| 44 | |
|---|
| 45 | </blockquote></td></tr></table> |
|---|
| 46 | |
|---|
| 47 | <table cellpadding="2" cellspacing="0" border="0"><tr><td bgcolor="#828DA6"><font face="arial,helvetica.sanserif" color="#ffffff"><a name="Linux"><strong>Linux</strong></a></font></td></tr><tr><td><blockquote> |
|---|
| 48 | |
|---|
| 49 | <p> |
|---|
| 50 | Most Linux distributions will ship packages for APR and OpenSSL. The JNI wrapper (libtcnative) will |
|---|
| 51 | then have to be compiled. It depends on APR, OpenSSL, and the Java headers. |
|---|
| 52 | </p> |
|---|
| 53 | |
|---|
| 54 | <p> |
|---|
| 55 | Requirements: |
|---|
| 56 | <ul> |
|---|
| 57 | <li>APR 1.2+ development headers (libapr1-dev package)</li> |
|---|
| 58 | <li>OpenSSL 0.9.7+ development headers (libssl-dev package)</li> |
|---|
| 59 | <li>JNI headers from Java compatible JDK 1.4+</li> |
|---|
| 60 | <li>GNU development environment (gcc, make)</li> |
|---|
| 61 | </ul> |
|---|
| 62 | </p> |
|---|
| 63 | |
|---|
| 64 | <p> |
|---|
| 65 | The wrapper library sources are located in the Tomcat binary bundle, in the |
|---|
| 66 | <code>bin/tomcat-native.tar.gz</code> archive. |
|---|
| 67 | Once the build environment is installed and the source archive is extracted, the wrapper library |
|---|
| 68 | can be compiled using (from the folder containing the configure script): |
|---|
| 69 | <div align="left"><table border="0" cellpadding="0" cellspacing="4"><tr><td height="1" width="1" bgcolor="#023264"><img border="0" hspace="0" vspace="0" height="1" width="1" src="./images/void.gif"></td><td height="1" bgcolor="#023264"><img border="0" hspace="0" vspace="0" height="1" width="1" src="./images/void.gif"></td><td height="1" width="1" bgcolor="#023264"><img border="0" hspace="0" vspace="0" height="1" width="1" src="./images/void.gif"></td></tr><tr><td width="1" bgcolor="#023264"><img border="0" hspace="0" vspace="0" height="1" width="1" src="./images/void.gif"></td><td height="1" bgcolor="#ffffff"><pre>./configure && make && make install</pre></td><td width="1" bgcolor="#023264"><img border="0" hspace="0" vspace="0" height="1" width="1" src="./images/void.gif"></td></tr><tr><td height="1" width="1" bgcolor="#023264"><img border="0" hspace="0" vspace="0" height="1" width="1" src="./images/void.gif"></td><td height="1" bgcolor="#023264"><img border="0" hspace="0" vspace="0" height="1" width="1" src="./images/void.gif"></td><td height="1" width="1" bgcolor="#023264"><img border="0" hspace="0" vspace="0" height="1" width="1" src="./images/void.gif"></td></tr></table></div> |
|---|
| 70 | </p> |
|---|
| 71 | |
|---|
| 72 | </blockquote></td></tr></table> |
|---|
| 73 | |
|---|
| 74 | </blockquote></td></tr></table><table cellpadding="2" cellspacing="0" border="0"><tr><td bgcolor="#525D76"><font face="arial,helvetica.sanserif" color="#ffffff"><a name="APR Components"><strong>APR Components</strong></a></font></td></tr><tr><td><blockquote> |
|---|
| 75 | |
|---|
| 76 | <p> |
|---|
| 77 | Once the libraries are properly installed and available to Java (if loading fails, the library path |
|---|
| 78 | will be displayed), the Tomcat connectors will automatically use APR. Configuration of the connectors |
|---|
| 79 | is similar to the regular connectors, but have a few extra attributes which are used to configure |
|---|
| 80 | APR components. Note that the defaults should be well tuned for most use cases, and additional |
|---|
| 81 | tweaking shouldn't be required. |
|---|
| 82 | </p> |
|---|
| 83 | |
|---|
| 84 | <p> |
|---|
| 85 | When APR is enabled, the following features are also enabled in Tomcat: |
|---|
| 86 | <ul> |
|---|
| 87 | <li>Secure session ID generation by default on all platforms (platforms other than Linux required |
|---|
| 88 | random number generation using a configured entropy)</li> |
|---|
| 89 | <li>OS level statistics on memory usage and CPU usage by the Tomcat process are displayed by |
|---|
| 90 | the status servlet</li> |
|---|
| 91 | </ul> |
|---|
| 92 | </p> |
|---|
| 93 | |
|---|
| 94 | </blockquote></td></tr></table><table cellpadding="2" cellspacing="0" border="0"><tr><td bgcolor="#525D76"><font face="arial,helvetica.sanserif" color="#ffffff"><a name="APR Lifecycle Listener Configuration"><strong>APR Lifecycle Listener Configuration</strong></a></font></td></tr><tr><td><blockquote> |
|---|
| 95 | <table cellpadding="2" cellspacing="0" border="0"><tr><td bgcolor="#828DA6"><font face="arial,helvetica.sanserif" color="#ffffff"><a name="AprLifecycleListener"><strong>AprLifecycleListener</strong></a></font></td></tr><tr><td><blockquote> |
|---|
| 96 | <attribute name="SSLEngine" required="false"> |
|---|
| 97 | <p> |
|---|
| 98 | Name of the SSLEngine to use. off: Do not use SSL, on: Use SSL but no specific ENGINE. |
|---|
| 99 | The default value is <b>on</b>. |
|---|
| 100 | This initializes the native SSL engine, then enable the use of this engine in the connector |
|---|
| 101 | using the <code>SSLEnabled</code> attribute. Example: |
|---|
| 102 | <div align="left"><table border="0" cellpadding="0" cellspacing="4"><tr><td height="1" width="1" bgcolor="#023264"><img border="0" hspace="0" vspace="0" height="1" width="1" src="./images/void.gif"></td><td height="1" bgcolor="#023264"><img border="0" hspace="0" vspace="0" height="1" width="1" src="./images/void.gif"></td><td height="1" width="1" bgcolor="#023264"><img border="0" hspace="0" vspace="0" height="1" width="1" src="./images/void.gif"></td></tr><tr><td width="1" bgcolor="#023264"><img border="0" hspace="0" vspace="0" height="1" width="1" src="./images/void.gif"></td><td height="1" bgcolor="#ffffff"><pre> |
|---|
| 103 | <Listener className="org.apache.catalina.core.AprLifecycleListener" SSLEngine="on" /> |
|---|
| 104 | </pre></td><td width="1" bgcolor="#023264"><img border="0" hspace="0" vspace="0" height="1" width="1" src="./images/void.gif"></td></tr><tr><td height="1" width="1" bgcolor="#023264"><img border="0" hspace="0" vspace="0" height="1" width="1" src="./images/void.gif"></td><td height="1" bgcolor="#023264"><img border="0" hspace="0" vspace="0" height="1" width="1" src="./images/void.gif"></td><td height="1" width="1" bgcolor="#023264"><img border="0" hspace="0" vspace="0" height="1" width="1" src="./images/void.gif"></td></tr></table></div> |
|---|
| 105 | </p> |
|---|
| 106 | <p>See the <a href="http://www.openssl.org">Official OpenSSL |
|---|
| 107 | website</a> for more details on SSL hardware engines and manufacturers. |
|---|
| 108 | </p> |
|---|
| 109 | </attribute> |
|---|
| 110 | </blockquote></td></tr></table> |
|---|
| 111 | </blockquote></td></tr></table><table cellpadding="2" cellspacing="0" border="0"><tr><td bgcolor="#525D76"><font face="arial,helvetica.sanserif" color="#ffffff"><a name="APR Connectors Configuration"><strong>APR Connectors Configuration</strong></a></font></td></tr><tr><td><blockquote> |
|---|
| 112 | |
|---|
| 113 | <table cellpadding="2" cellspacing="0" border="0"><tr><td bgcolor="#828DA6"><font face="arial,helvetica.sanserif" color="#ffffff"><a name="HTTP"><strong>HTTP</strong></a></font></td></tr><tr><td><blockquote> |
|---|
| 114 | |
|---|
| 115 | <p> |
|---|
| 116 | When APR is enabled, the HTTP connector will use sendfile for hadling large static files (all such |
|---|
| 117 | files will be sent ansychronously using high performance kernel level calls), and will use |
|---|
| 118 | a socket poller for keepalive, increasing scalability of the server. |
|---|
| 119 | </p> |
|---|
| 120 | |
|---|
| 121 | <p> |
|---|
| 122 | The following attributes are supported in the HTTP APR connector in addition to the ones supported |
|---|
| 123 | in the regular HTTP connector: |
|---|
| 124 | </p> |
|---|
| 125 | |
|---|
| 126 | <table cellpadding="5" border="1"><tr><th bgcolor="#023264" width="15%"><font color="#ffffff">Attribute</font></th><th bgcolor="#023264" width="85%"><font color="#ffffff">Description</font></th></tr><tr><td valign="center" align="left"><code>keepAliveTimeout</code></td><td valign="center" align="left"> |
|---|
| 127 | <p>The number of milliseconds this <strong>Connector</strong> will wait for |
|---|
| 128 | another HTTP request before closing the connection. |
|---|
| 129 | The default value is to use the value that has been set for the |
|---|
| 130 | connectionTimeout attribute. This value also controls the timeout interval which |
|---|
| 131 | is used for Comet connections.</p> |
|---|
| 132 | </td></tr><tr><td valign="center" align="left"><code>pollTime</code></td><td valign="center" align="left"> |
|---|
| 133 | <p>Duration of a poll call. Lowering this value will slightly decrease latency of connections |
|---|
| 134 | being kept alive in some cases, but will use more CPU as more poll calls are being made. The |
|---|
| 135 | default value is 2000 (5ms).</p> |
|---|
| 136 | </td></tr><tr><td valign="center" align="left"><code>pollerSize</code></td><td valign="center" align="left"> |
|---|
| 137 | <p>Amount of sockets that the poller responsible for polling kept alive connections can hold at a |
|---|
| 138 | given time. Extra connections will be closed right away. The default value is 8192, corresponding to |
|---|
| 139 | 8192 keepalive connections.</p> |
|---|
| 140 | </td></tr><tr><td valign="center" align="left"><code>useSendfile</code></td><td valign="center" align="left"> |
|---|
| 141 | <p>Use kernel level sendfile for certain static files. The default value is true.</p> |
|---|
| 142 | </td></tr><tr><td valign="center" align="left"><code>sendfileSize</code></td><td valign="center" align="left"> |
|---|
| 143 | <p>Amount of sockets that the poller responsible for sending static files asynchronously can hold |
|---|
| 144 | at a given time. Extra connections will be closed right away without any data being sent |
|---|
| 145 | (resulting in a zero length file on the client side). Note that in most cases, sendfile is a call |
|---|
| 146 | that will return right away (being taken care of "synchonously" by the kernel), and the sendfile |
|---|
| 147 | poller will not be used, so the amount of static files which can be sent concurrently is much larger |
|---|
| 148 | than the specified amount. The default value is 1024.</p> |
|---|
| 149 | </td></tr></table> |
|---|
| 150 | |
|---|
| 151 | </blockquote></td></tr></table> |
|---|
| 152 | |
|---|
| 153 | <table cellpadding="2" cellspacing="0" border="0"><tr><td bgcolor="#828DA6"><font face="arial,helvetica.sanserif" color="#ffffff"><a name="HTTPS"><strong>HTTPS</strong></a></font></td></tr><tr><td><blockquote> |
|---|
| 154 | |
|---|
| 155 | <p> |
|---|
| 156 | When APR is enabled, the HTTPS connector will use a socket poller for keepalive, increasing |
|---|
| 157 | scalability of the server. It also uses OpenSSL, which may be more optimized than JSSE depending |
|---|
| 158 | on the processor being used, and can be complemented with many commercial accelerator components. |
|---|
| 159 | Unlike the HTTP connector, the HTTPS connector cannot use sendfile to optimize static file |
|---|
| 160 | processing. |
|---|
| 161 | </p> |
|---|
| 162 | |
|---|
| 163 | <p> |
|---|
| 164 | The HTTPS APR connector has the same basic attributes than the HTTP APR connector, but adds |
|---|
| 165 | OpenSSL specific ones. For the full details on using OpenSSL, please refer to OpenSSL documentations |
|---|
| 166 | and the many books available for it (see the <a href="http://www.openssl.org">Official OpenSSL |
|---|
| 167 | website</a>). The SSL specific attributes for the connector are: |
|---|
| 168 | </p> |
|---|
| 169 | |
|---|
| 170 | <table cellpadding="5" border="1"><tr><th bgcolor="#023264" width="15%"><font color="#ffffff">Attribute</font></th><th bgcolor="#023264" width="85%"><font color="#ffffff">Description</font></th></tr><tr><td valign="center" align="left"><code>SSLEnabled</code></td><td valign="center" align="left"> |
|---|
| 171 | <p> |
|---|
| 172 | Enable SSL on the socket, default value is false. Set this value to true |
|---|
| 173 | to enable SSL handshake/encryption/decryption in the APR connector. |
|---|
| 174 | </p> |
|---|
| 175 | </td></tr><tr><td valign="center" align="left"><code>SSLProtocol</code></td><td valign="center" align="left"> |
|---|
| 176 | <p> |
|---|
| 177 | Protocol which may be used for communicating with clients. The default is "all", with |
|---|
| 178 | other acceptable values being "SSLv2", "SSLv3", "TLSv1", and "SSLv2+SSLv3". |
|---|
| 179 | </p> |
|---|
| 180 | </td></tr><tr><td valign="center" align="left"><code>SSLCipherSuite</code></td><td valign="center" align="left"> |
|---|
| 181 | <p> |
|---|
| 182 | Ciphers which may be used for communicating with clients. The default is "ALL", with |
|---|
| 183 | other acceptable values being a list of ciphers, with ":" used as the delimiter |
|---|
| 184 | (see OpenSSL documentation for the list of ciphers supported). |
|---|
| 185 | </p> |
|---|
| 186 | </td></tr><tr><td valign="center" align="left"><strong><code>SSLCertificateFile</code></strong></td><td valign="center" align="left"> |
|---|
| 187 | <p> |
|---|
| 188 | Name of the file that contains the server certificate. The format is PEM-encoded. |
|---|
| 189 | </p> |
|---|
| 190 | </td></tr><tr><td valign="center" align="left"><code>SSLCertificateKeyFile</code></td><td valign="center" align="left"> |
|---|
| 191 | <p> |
|---|
| 192 | Name of the file that contains the server private key. The format is PEM-encoded. |
|---|
| 193 | The default value is the value of "SSLCertificateFile" and in this case both certificate |
|---|
| 194 | and private key have to be in this file (NOT RECOMMENDED). |
|---|
| 195 | </p> |
|---|
| 196 | </td></tr><tr><td valign="center" align="left"><code>SSLPassword</code></td><td valign="center" align="left"> |
|---|
| 197 | <p> |
|---|
| 198 | Pass phrase for the encrypted private key. If "SSLPassword" is not provided, the callback fonction |
|---|
| 199 | should prompt for the pass phrase. |
|---|
| 200 | </p> |
|---|
| 201 | </td></tr><tr><td valign="center" align="left"><code>SSLVerifyClient</code></td><td valign="center" align="left"> |
|---|
| 202 | <p> |
|---|
| 203 | Ask client for certificate. The default is "none", meaning the client will not have the opportunity |
|---|
| 204 | to submit a certificate. Other acceptable values include "optional", "require" and "optionalNoCA". |
|---|
| 205 | </p> |
|---|
| 206 | </td></tr><tr><td valign="center" align="left"><code>SSLVerifyDepth</code></td><td valign="center" align="left"> |
|---|
| 207 | <p> |
|---|
| 208 | Maximum verification depth for client certificates. The default is "10". |
|---|
| 209 | </p> |
|---|
| 210 | </td></tr><tr><td valign="center" align="left"><code>SSLCACertificateFile</code></td><td valign="center" align="left"> |
|---|
| 211 | <p> |
|---|
| 212 | See <a href="http://httpd.apache.org/docs/2.2/mod/mod_ssl.html#sslcacertificatefile">the mod_ssl documentation</a>. |
|---|
| 213 | </p> |
|---|
| 214 | </td></tr><tr><td valign="center" align="left"><code>SSLCACertificatePath</code></td><td valign="center" align="left"> |
|---|
| 215 | <p> |
|---|
| 216 | See <a href="http://httpd.apache.org/docs/2.2/mod/mod_ssl.html#sslcacertificatepath">the mod_ssl documentation</a>. |
|---|
| 217 | </p> |
|---|
| 218 | </td></tr><tr><td valign="center" align="left"><code>SSLCertificateChainFile</code></td><td valign="center" align="left"> |
|---|
| 219 | <p> |
|---|
| 220 | See <a href="http://httpd.apache.org/docs/2.2/mod/mod_ssl.html#sslcertificatechainfile">the mod_ssl documentation</a>. |
|---|
| 221 | </p> |
|---|
| 222 | </td></tr><tr><td valign="center" align="left"><code>SSLCARevocationFile</code></td><td valign="center" align="left"> |
|---|
| 223 | <p> |
|---|
| 224 | See <a href="http://httpd.apache.org/docs/2.2/mod/mod_ssl.html#sslcarevocationfile">the mod_ssl documentation</a>. |
|---|
| 225 | </p> |
|---|
| 226 | </td></tr><tr><td valign="center" align="left"><code>SSLCARevocationPath</code></td><td valign="center" align="left"> |
|---|
| 227 | <p> |
|---|
| 228 | See <a href="http://httpd.apache.org/docs/2.2/mod/mod_ssl.html#sslcarevocationpath">the mod_ssl documentation</a>. |
|---|
| 229 | </p> |
|---|
| 230 | </td></tr></table> |
|---|
| 231 | |
|---|
| 232 | <p> |
|---|
| 233 | An example SSL Connector declaration can be: |
|---|
| 234 | <div align="left"><table border="0" cellpadding="0" cellspacing="4"><tr><td height="1" width="1" bgcolor="#023264"><img border="0" hspace="0" vspace="0" height="1" width="1" src="./images/void.gif"></td><td height="1" bgcolor="#023264"><img border="0" hspace="0" vspace="0" height="1" width="1" src="./images/void.gif"></td><td height="1" width="1" bgcolor="#023264"><img border="0" hspace="0" vspace="0" height="1" width="1" src="./images/void.gif"></td></tr><tr><td width="1" bgcolor="#023264"><img border="0" hspace="0" vspace="0" height="1" width="1" src="./images/void.gif"></td><td height="1" bgcolor="#ffffff"><pre> |
|---|
| 235 | <Connector port="443" maxHttpHeaderSize="8192" |
|---|
| 236 | maxThreads="150" minSpareThreads="25" maxSpareThreads="75" |
|---|
| 237 | enableLookups="false" disableUploadTimeout="true" |
|---|
| 238 | acceptCount="100" scheme="https" secure="true" |
|---|
| 239 | SSLEnabled="true" |
|---|
| 240 | SSLCertificateFile="${catalina.base}/conf/localhost.crt" |
|---|
| 241 | SSLCertificateKeyFile="${catalina.base}/conf/localhost.key" /></pre></td><td width="1" bgcolor="#023264"><img border="0" hspace="0" vspace="0" height="1" width="1" src="./images/void.gif"></td></tr><tr><td height="1" width="1" bgcolor="#023264"><img border="0" hspace="0" vspace="0" height="1" width="1" src="./images/void.gif"></td><td height="1" bgcolor="#023264"><img border="0" hspace="0" vspace="0" height="1" width="1" src="./images/void.gif"></td><td height="1" width="1" bgcolor="#023264"><img border="0" hspace="0" vspace="0" height="1" width="1" src="./images/void.gif"></td></tr></table></div> |
|---|
| 242 | </p> |
|---|
| 243 | |
|---|
| 244 | </blockquote></td></tr></table> |
|---|
| 245 | |
|---|
| 246 | <table cellpadding="2" cellspacing="0" border="0"><tr><td bgcolor="#828DA6"><font face="arial,helvetica.sanserif" color="#ffffff"><a name="AJP"><strong>AJP</strong></a></font></td></tr><tr><td><blockquote> |
|---|
| 247 | |
|---|
| 248 | <p> |
|---|
| 249 | When APR is enabled, the AJP connector will use a socket poller for keepalive, increasing |
|---|
| 250 | scalability of the server. As AJP is designed around a pool of persistent (or almost |
|---|
| 251 | persistent) connections, this will reduce significantly the amount of processing threads |
|---|
| 252 | needed by Tomcat. Unlike the HTTP connector, the AJP connector cannot use sendfile to optimize |
|---|
| 253 | static file processing. |
|---|
| 254 | </p> |
|---|
| 255 | |
|---|
| 256 | <p> |
|---|
| 257 | The following attributes are supported in the AJP APR connector in addition to the ones supported |
|---|
| 258 | in the regular AJP connector: |
|---|
| 259 | </p> |
|---|
| 260 | |
|---|
| 261 | <table cellpadding="5" border="1"><tr><th bgcolor="#023264" width="15%"><font color="#ffffff">Attribute</font></th><th bgcolor="#023264" width="85%"><font color="#ffffff">Description</font></th></tr><tr><td valign="center" align="left"><code>pollTime</code></td><td valign="center" align="left"> |
|---|
| 262 | <p>Duration of a poll call. Lowering this value will slightly decrease latency of connections |
|---|
| 263 | being kept alive in some cases, but will use more CPU as more poll calls are being made. The |
|---|
| 264 | default value is 2000 (5ms).</p> |
|---|
| 265 | </td></tr><tr><td valign="center" align="left"><code>pollerSize</code></td><td valign="center" align="left"> |
|---|
| 266 | <p>Amount of sockets that the poller responsible for polling kept alive connections can hold at a |
|---|
| 267 | given time. Extra connections will be closed right away. The default value is 8192, corresponding to |
|---|
| 268 | 8192 keepalive connections.</p> |
|---|
| 269 | </td></tr></table> |
|---|
| 270 | |
|---|
| 271 | </blockquote></td></tr></table> |
|---|
| 272 | |
|---|
| 273 | </blockquote></td></tr></table></td></tr><!--FOOTER SEPARATOR--><tr><td colspan="2"><hr size="1" noshade></td></tr><!--PAGE FOOTER--><tr><td colspan="2"><div align="center"><font size="-1" color="#525D76"><em> |
|---|
| 274 | Copyright © 1999-2008, Apache Software Foundation |
|---|
| 275 | </em></font></div></td></tr></table></body></html> |
|---|
