Oops! I forgot to mention in the email below that I also added the shared=true flag for the default app in both the xml files as Magnus had suggested below. Jay Jay Jayaprasad <[EMAIL PROTECTED]> wrote: I tried this but it didn't work as expected. I created a secure-web-site.xml which is a copy of default_web-site.xml with secure set to true and the ssl-config tag. I also added the new site to server.xml. I then started orion and was able to access the site through SSL and non-SSL connection. However, when I tried the cart example and added an item in the non-SSL connection and then switched over to the SSL connection, the item I had added in the non-SSL connection was not available in the SSL connection. This would imply that a different session was created for the the SSL and non-SSL connection. Is there any way that they can share the same session? Jay "Magnus Stenman" <[EMAIL PROTECTED]> wrote: Yes, just add shared="true" for both the (default-)web-app tags in their respective web-site.xml files. So have something like: <default-web-app application="myApp" name="myApp-web" shared="true" /> in both of them... Hope it helps :) /Magnus Stenman, the Orion team ----- Original Message ----- From: "Jay Jayaprasad" <[EMAIL PROTECTED]> To: "Orion-Interest" <[EMAIL PROTECTED]> Sent: Saturday, February 12, 2000 4:27 PM Subject: Using SSL and non-SSL connections on one web site > > Is it possible to configure Orion so that a website can be accessed through > both SSL and non-SSL means? I have a web app that needs SSL connection for > part of it and a non-SSL connection for other parts. However, I would like to > share the same session between the SSL and non-SSL parts. The servlet spec > says that a session is valid only within a web app. So, this would mean that > in order to use the same session, the web site that a web app is part of > should be accessible through both SSL and non-SSL connections. An example of > what I want to do would be an ecommerce store where you can browse and add > items to a shopping cart through a non-SSL connection and then switch over to > an SSL connection to checkout the items. Any help would be much appreciated. > > Thanks, > Jay Jayaprasad > > > ____________________________________________________________________ > Get your own FREE, personal Netscape WebMail account today at http://webmail.netscape.com. ____________________________________________________________________ Get your own FREE, personal Netscape WebMail account today at http://webmail.netscape.com. ____________________________________________________________________ Get your own FREE, personal Netscape WebMail account today at http://webmail.netscape.com.
