apache - CSR 生成：Tomcat 还是 Apache？

Question

虽然不完全与编程相关。我最近购买了一个 SSL 证书，在配置过程中我需要生成为 CSR。

我通过 mod_jk 在 Apache 后面运行 Tomcat。我看到两种用于生成 CSR 的选项，一种用于 Apache，另一种用于基于 Java 的服务器。我的问题是我用哪个？目前，需要 SSL 的站点配置为将所有请求直接转发到 Tomcat 进行处理。但是，这可能会更改为仅某些页面。这有什么不同吗？

提前致谢。

Answer 1

If you are going to use mod_jk then the SSL cert should be generated for apache. mod_jk connects to tomcat over the APR protocol (default 8009) so all SSL handling is done by Apache. This works nice since, in the future, you may only want to proxy dynamic content with mod_jk, assigning the cert to Apache will allow you to proxy static content using HTTPS.

Fyi, the thread you referenced only discussed whether you had to generate the keypair and cert request on the same machine and is not related to running tomcat + apache + SSL. That thread is not relevant to your question.