2. Generation of CSR
keytool -certreq -alias XXX -file XXX.csr -keystore ./XXX.keystore
Send the generated XXX.csr to the signing authority and get the certificate from them. Save that file as “XXX.thawte”

3. Install the certificate in the keystore
keytool -import -alias XXX -trustcacerts -file XXX.thawte -keystore XXX.keystore

That’s it.

I have CentOS installed on my server with Apache 2 installed through yum and the goal was to install the binaries for Tomcat 6 and make them talk to each other. After some googling, the best tutorial I found to configure tomcat through mod_jk was found here. I have attached the PDF of the instructions here.
After following the steps, I was easily able to create a worker and configure apache to forward the request to /examples to tomcat.
The next issue was how to configure virtual hosts so that I can host multiple websites, some handled by apache and others through tomcat. Following is the snippet of httpd.conf setting that needs to be updated to enable virtual hosting.


NameVirtualHost *:80
#
# NOTE: NameVirtualHost cannot be used without a port specifier
# (e.g. :80) if mod_ssl is being used, due to the nature of the
# SSL protocol.
#
#
# VirtualHost example:
# Almost any Apache directive may go into a VirtualHost container.
# The first VirtualHost section is used for requests without a known
# server name.
#
#<VirtualHost *:80>
#    ServerAdmin webmaster@dummy-host.example.com
#    DocumentRoot /www/docs/dummy-host.example.com
#    ServerName dummy-host.example.com
#    ErrorLog logs/dummy-host.example.com-error_log
#    CustomLog logs/dummy-host.example.com-access_log common
#</VirtualHost>
<VirtualHost *:80>
ServerAdmin webmaster@lalitmehta.com
ServerName www.lalitmehta.com
ErrorLog logs/lalitmehta.com-error_log
CustomLog logs/lalitmehta-access_log common
</VirtualHost>
<VirtualHost *:80>
ServerAdmin info@saiyam.com
ServerName rsspile.com
#   No need of DocumentRoot
ErrorLog logs/rsspile.com-error_log
CustomLog logs/rsspile.com-access_log common
JkMount /rss ajp13
JkMount /rss/* ajp13
</VirtualHost>


I do have two questions though:
1. since mod_jk.so is available for download for Linux, what advantage you get by compiling Apache and mod_jk from source? Most of the websites mention the need to compile the source. Let me know
2. How do I enable SSL on my server with the above configuration?

var newUrl = "http://www.google.com/";
window.location = newUrl;
// This also doesn't work!
// window.location.href = newUrl;

After a scratching head for couple of hours, found the solution here

var newUrl = "http://google.com/";
setTimeout(function()
{
window.location = newUrl;
}, 0);

Full story

You can then access the parent(opener) with:
var opener = window.dialogArguments;

You can then access any function declared in parent window with:
opener.myFunction();

1.  Keep uploaded files where they cannot be directly accessed by the users via a direct URL. This can be done either by storing uploaded files outside of the web root or configuring the web server to deny access to the uploads directory.
2. Use system-generated file names instead of the names supplied by users when storing files on the file system. This will prevent local file inclusion attacks and also make any kind of file name manipulation by the user impossible. More information can be found here.

1. Attribute alink is forbidden on body.
2. Attribute background is forbidden on body.
3. Attribute bgcolor is forbidden on body, table, td, th, tr.
4. Attribute border is forbidden on img, object, it can be used on table.
5. Attribute clear is forbidden on br.
6. Attribute language is forbidden on script.
7. Attribute link is forbidden on body.
8. Attribute name is forbidden on form, img, it can be used on a, button, input, map, meta, object, param, select, textarea.
9. Attribute noshade is forbidden on hr.
10. Attribute nowrap is forbidden on td, th.
11. Attribute start is forbidden on ol.
12. Attribute target is forbidden on a, area, base, form, link.
13. Attribute text is forbidden on body.
14. Attribute type is forbidden on li, ol, ul. It can be used on a button, input, link, object, param, script, style.
15. Attribute value is forbidden on li. It can be used on button, input, option, param.
16. Attribute vlink is forbidden on body.

Following elements cannot occur in the given context in the Strict XHTML:

1. #PCDATA cannot be a child of blockquote, body, form, noscript.
2. Element a cannot be a child of blockquote, body, form, noscript.
3. Element abbr cannot be a child of blockquote, body, form, noscript.
4. Element acronym cannot be a child of blockquote, body, form, noscript.
5. Element b cannot be a child of blockquote, body, form, noscript.
6. Element bdo cannot be a child of blockquote, body, form, noscript.
7. Element big cannot be a child of blockquote, body, form, noscript.
8. Element br cannot be a child of blockquote, body, form, noscript.
9. Element button cannot be a child of blockquote, body, form, noscript.
10. Element cite cannot be a child of blockquote, body, form, noscript.
11. Element code cannot be a child of blockquote, body, form, noscript.
12. Element dfn cannot be a child of blockquote, body, form, noscript.
13. Element em cannot be a child of blockquote, body, form, noscript.
14. Element i cannot be a child of blockquote, body, form, noscript.
15. Element img cannot be a child of blockquote, body, form, noscript.
16. Element input cannot be a child of blockquote, body, form, noscript.
17. Element kbd cannot be a child of blockquote, body, form, noscript.
18. Element label cannot be a child of blockquote, body, form, noscript.
19. Element map cannot be a child of blockquote, body, form, noscript.
20. Element object cannot be a child of blockquote, body, form, noscript.
21. Element q cannot be a child of blockquote, body, form, noscript.
22. Element samp cannot be a child of blockquote, body, form, noscript.
23. Element select cannot be a child of blockquote, body, form, noscript.
24. Element small cannot be a child of blockquote, body, form, noscript.
25. Element span cannot be a child of blockquote, body, form, noscript.
26. Element strong cannot be a child of blockquote, body, form, noscript.
27. Element sub cannot be a child of blockquote, body, form, noscript.
28. Element sup cannot be a child of blockquote, body, form, noscript.
29. Element textarea cannot be a child of blockquote, body, form, noscript.
30. Element tt cannot be a child of blockquote, body, form, noscript.
31. Element var cannot be a child of blockquote, body, form, noscript.

1. Make Fewer HTTP Requests
2. Use a Content Delivery Network
3. Add an Expires Header
4. Gzip Components
5. Put Stylesheets at the Top
6. Put Scripts at the Bottom
7. Avoid CSS Expressions
8. Make JavaScript and CSS External
9. Reduce DNS Lookups
10. Minify JavaScript
11. Avoid Redirects
12. Remove Duplicate Scripts
13. Configure ETags

You can read the full article here.