Shibboleth Developers

["Scott Cantor" <>]

> Would this be a step toward independence from Apache?   --Keith

Yes, but it remains to be shown whether the SSL implementation from Sun is
anywhere near capable of scaling. I think we can get to a point where Tomcat
can handle the certificate handshake, but it's sort of like Jim's example of
files vs. databases...we might deliver it without requiring Apache, but be
hard-pressed to run it in production that way.

I'd also note that Tomcat churns like crazy. I prefer having most of my
configuration in httpd.conf because it's a stable environment. I did an
upgrade from Tomcat 5.0/JDK 1.4 to 5.5/1.5 on two boxes yesterday and it
took maybe 30 minutes, because the Tomcat part was minimal.

-- Scott