We have a Java application which will be installed into tomcat6. Our security team will not allow Tomcat to be public facing so I am in a postion where I have to recieve https traffic to IIS 7.5 and use a URL rewrite to direct traffic to Tomcat6 (using URL rewrite module 2). Both IIS 7.5 and Tomcat6 are on the same server.
My questions are as follows :
Can I redirect https traffic from IIS7.5 to Tomcat6 ??
If so how do I keep it encrypted ??? (I already have ssl setup between the external network router and the IIS7.5 site)
Am I correct in saying that traffic recieved from IIS7.5 to Tomcat will not be returned back to IIS7.5 and that it will be sent back to the client address and need a https connection to the network device connecting it to the public ??
As per no. 3 when the java application responds to the https traffic I believe it will respond directly back to the client which would be the external network device - how do I setup ssl between tomcat and the network device as I believe this would be a new connection ????
Any help will be greatly appreciated