...
Using the Apache Portable Runtime (APR)
Note | |
---|---|
Wiki Markup | This section should be ignored for the time being, as it does not work due to this bug: http://issues.apache.org/bugzilla/show_bug.cgi?id=37869 {html}</strong> |
See http://tomcat.apache.org/tomcat-5.5-doc/apr.html for information about "Apache Portable Runtime and Tomcat".
This setup roughly means that you will be using Tomcat as a Java Servlet Container with OS-native HTTP connectors based on OpenSSL. This greatly enhances (networking) performance. It should also solve the concerns about using Tomcat standalone with the standard Coyote HTTP connectors based on JSSE since the APR connectors support the setting SSLVerifyClient="optionalNoCA"
.
Note that you cannot use the JKS format for any keystore when using the APR since it uses OpenSSL (it is possible to convert from JKS using extkeytool).
...