Tomcat 10 & HTTPS

[p058522]

Hello,
I am inquiring about the future of OD. I am receiving a bit of pressure from our web infrastructure team to move toward Tomcat 10 and wondering if that is on the roadmap soon.
Also, I am receiving some grief about continuing to use HTTP for web services. Is there any plan to enable HTTPS?

[wilsonyu]

We have not decided when we are going to support Tomcat 10.
Can you elaborate on the difficulties with HTTPS for web services? Are you talking about using the REST connector over https?

[p058522]

Correct, our security folks do not like http. We are getting warned that this is going to be increasingly scrutinized and could result in issues if it is not corrected. Still some time, but I just really do not need the hassle. We already must create API which AEP can access which in turn call the API's we really need using https.

Additionally, it is really annoying that AEP requires the API return to be in the format Return:{name:value} which requires the intermediary API to reformat the actual return.

[wilsonyu]

I meant I didn't understand the problem you have with https. I don't think EP or OD posts any restriction. Can you give me a concrete example or error when trying to use https for a REST operation?

[p058522]

Hmm... OK, I may need to try this again. Several years ago I tried using https, and I could swear that I was advised back then that https was not an option. I do see now in the 8.1.2 dev guide some references to using it, although those are buried in a couple of field descriptions. I'll give it another try and get back to you if I cant get it.
Thanks