Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have got a JEE JBoss AS7.1.1 Server. In this Server two web app's are running. One of it is a public weblog. Access for everyone. The other one is a private app to write the content. This one requires a formbased login, handled by the jboss.

Now I want to use SSL to encrypt the connection only to the private webapp.

The incoming user requests should be handled by the apache2 Server, while listening on port 80 and 443. I have read to use the proxy mod for forwarding the requests to the jboss.

What I have to do to config the ssl part? Is it enough to activate / configure ssl in the jboss config? Or do I have only to configure the apache2 server or both in combination?

What is the best way?

I hope someone can give me some tipps To solve my Problem.


share|improve this question

You dont need to configure SSL on the JBoss side of things although, in my opinion it is easier to do so since Java keystore files dont require you have OpenSSL installed but creating a cert for Apache does. (maybe Keystore Explorer could get around this but I havent tried)

What I usually do is configure SSL on the Apache side of things (using mod_ssl) and then use mod_proxy to forward to an internal HTTP (or AJP) port. NOTE: You also need mod_ajp only if you have more than one JBoss running in a cluster, which also requires your app know how to handle a clustered session.

I wrote an old article on how to do it using the older JBoss 3.x:

share|improve this answer
Hi djangofan! Thank's for your answer! I will check it... – Chris81T May 7 '12 at 17:49

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.