Re: SSL and Struts

[John D. Dubchak]

On Saturday 08 February 2003 09:26, Rabih Yazbeck wrote:
> Hello,
>
> I have question regarding the use and the compatibility of SSL and
> Struts. My application requires SSL-only connection. Is there any cost
> for that? Any compatibility issue by using Struts? Thanks in advance...
>
> - Rabih

There is an extension to struts for SSL.  Try looking at 
http://sslext.sourceforge.net for the downloads and any documentation.

John


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

RE: SSL and Struts

[mech]

Hi,

I mix http and https protocol in my current webapp development.
My container and form based login is switching to https by a container
security constraint. Afterwards I'm also using session beans and almost
everything struts offers. So far I encountered not special difficulties
with regards to the compatibility of struts and ssl and why should I? 

IHMO just place some security contraints in your web.xml and that's it.

Michael

> -Original Message-
> From: Rabih Yazbeck [mailto:[EMAIL PROTECTED]] 
> Sent: Samstag, 8. Februar 2003 16:26
> To: 'Struts Users Mailing List'
> Subject: SSL and Struts
> 
> 
> Hello,
> 
> I have question regarding the use and the compatibility of 
> SSL and Struts. My application requires SSL-only connection. 
> Is there any cost for that? Any compatibility issue by using 
> Struts? Thanks in advance...
> 
> - Rabih
> 
> 
> -
> To unsubscribe, e-mail: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]
> 


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

SSL and Struts

[Rabih Yazbeck]

Hello,

I have question regarding the use and the compatibility of SSL and
Struts. My application requires SSL-only connection. Is there any cost
for that? Any compatibility issue by using Struts? Thanks in advance...

- Rabih


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: SSL and Struts

[Laurie Dickinson]

Thanks.

The problem was with the server configuration.  The sourceforge tag helped 
with the diagnosis.

At 01:41 PM 11/13/2002 -0500, Robert Leland wrote:
Laurie Dickinson wrote:


Dear All,

My first posting.  I'm having some difficulty using SSL with struts.
Here's some background (with dummy names):


There is a struts tag on sourceforge.net that lets you switch back and 
forth between ssl and no ssl.
Maybe it can give you some hints ?

-Rob



--
To unsubscribe, e-mail:   
For additional commands, e-mail: 


*--*
Laurie Dickinson
Only Connect
2104 Third St. N.E.
Minneapolis, MN 55418
(612) 987-4089
[EMAIL PROTECTED]
*--*


--
To unsubscribe, e-mail:   
For additional commands, e-mail: 

SSL and Struts

[Laurie Dickinson]

Dear All,

My first posting.  I'm having some difficulty using SSL with 
struts.  Here's some background (with dummy names):

Running tomcat4.1 integrated with apache on a Linux box
Regular server = tcs.xxx.com
Secure server = secure.xxx.com
These are the same server, just different names.
When I go to https://secure.xxx.com/appname/filename.jsp the secure 
connection works just fine.
When I go to https://secure.xxx.com/appname/actionname.do I get a 404 error.
When I go to http://secure.xxx.com/appname/actionname.do it works just 
fine.  (Alternately, http://tcs.xxx.com/appname/actionname.do works also.)

From what little I've read, ssl should work "transparently."  I'm not sure 
if I'm just doing something wrong or if this is a configuration error.

Thanks for any help.

Best,

Laurie


--
To unsubscribe, e-mail:   
For additional commands, e-mail: 

URGENT!!! NEED HELP WITH SSL AND STRUTS

[SPandith]

Hi,

I am working on a Struts app where some of the pages need to be secure. We
are using WebLogic 5.1 sp6
I will not be using a war file to deploy. Instead I have all the jsp pages
under my webapp directory.

Here are a few questions I have:
1. Should I create 2 directories - One which has only secure files and the
other which has only standard files.
2. If so should I do need to add anything in the config file?
3. Since the user will be in standard mode when they login I need to switch
them to secure mode for the secure pages. 
In order to switch from http to https should I calculate the new absolute
URL, 
wrap it in a new ActionForward with the "redirect" property set, 
and return that to the controller servlet?

It would be great if anyone could email me an example.

Thanks,
S P

This message is intended only for the use of the Addressee and may contain
information that is PRIVILEGED and CONFIDENTIAL. If you are not the intended
recipient, dissemination of this communication is prohibited. If you have
received this communication in error, please erase all copies of the message
and its attachments and notify us immediately. 

Re: SSL and Struts

[Ted Husted]

I finally got this to work. 

My problem was that I thought that 

< http://java.sun.com/products/jsse/INSTALL.html - item 7 >

meant I can use 

java -Djava.protocol.handler.pkgs=com.sun.net.ssl.internal.www.protocol

add the property permanently from the command line. I finally added it
to the command line that starts my container, and everything started to
work.


"Craig R. McClanahan" wrote:
> 
> On Wed, 11 Apr 2001, Ted Husted wrote:
> 
> > I'm finding a similar problem with Resin - under SSL it connects fine
> > but the html:link tags resolve to  .
> >
> 
> Can you quote me an exact snippet of your JSP page that does this?  The
> only way you could possibly get nothing at all is if you specified none of
> the "forward", "href", or "page" attributes -- and the logic of the tag is
> supposed to throw a runtime exception in that case.

Re: SSL and Struts

[Craig R. McClanahan]

On Wed, 11 Apr 2001, Ted Husted wrote:

> I'm finding a similar problem with Resin - under SSL it connects fine
> but the html:link tags resolve to  . 
> 

Can you quote me an exact snippet of your JSP page that does this?  The
only way you could possibly get nothing at all is if you specified none of
the "forward", "href", or "page" attributes -- and the logic of the tag is
supposed to throw a runtime exception in that case.

Craig McClanahan

Re: SSL and Struts

[Ted Husted]

I'm finding a similar problem with Resin - under SSL it connects fine
but the html:link tags resolve to  . 

I tried adding the handler at the command line (as also recommended by
http://java.sun.com/products/jsse/INSTALL.html - item 7). 

java -Djava.protocol.handler.pkgs=com.sun.net.ssl.internal.www.protocol

but got the standard help screen in return, like I used an invalid
option, although -D= is listed as an option. 

I'm using 

java version "1.3.0_02"
Java(TM) 2 Runtime Environment, Standard Edition (build 1.3.0_02)
Java HotSpot(TM) Client VM (build 1.3.0_02, mixed mode)

And a Thawte certificate (PKCS #7 Certificate Chain format).

The jsse.jar is in my /jre/lib/ext directory, and everything not
involving hyperlinks seems fine.

Any ideas why this didn't take at the command line? If not, I guess the
next thing to try would be to subclass ActionServlet, extend init, and
try it at runtime.

(BTW, it seems that Catalina adds this protocol automatically, but
apparently other containers are not so clever ;-)

Dan Miser wrote:
> 
> Here's the reply I just posted on Bugzilla about this:
> 
> This isn't a bug of Struts, but a misconfiguration of SSL. In addition to
> the comments in Tomcat's server.xml, you need to define a system property to
> tell Java where it should find the classes for SSL support. You can do this
> either in code (System.setProperty(key, value)) or by passing the property
> in on the command line (-Dkey=value). This is the property I used with JSSE,
> and it works fine.
> 
> java.protocol.handler.pkgs = com.sun.net.ssl.internal.www.protocol
> 
> If anything, I would argue that the bug here is to report the
> MalformedURLException in RequestUtils.absoluteURL to a log file.
> 
> Dan Miser
> 
> >From: "Michael Wilimsky" <[EMAIL PROTECTED]>
> >Reply-To: [EMAIL PROTECTED]
> >To: <[EMAIL PROTECTED]>
> >Subject: SSL and Struts
> >Date: Tue, 10 Apr 2001 17:54:48 +0200
> >
> >i tried to establish a SSL-Connection with Tomcat / Struts using openSSL
> >
> >but when using https protocol url-rewriting seems to fail somehow... is
> >there a solution for that...
> >
> >p.s. i am working on a w2k machine with ie5
> >
> >michael

RE: SSL and Struts

[Michael Wilimsky]

hey... it works...

thanx for help...

michael

-Original Message-
From: Dan Miser [mailto:[EMAIL PROTECTED]]
Sent: Dienstag, 10. April 2001 16:19
To: [EMAIL PROTECTED]
Subject: Re: SSL and Struts


Here's the reply I just posted on Bugzilla about this:

This isn't a bug of Struts, but a misconfiguration of SSL. In addition to
the comments in Tomcat's server.xml, you need to define a system property to
tell Java where it should find the classes for SSL support. You can do this
either in code (System.setProperty(key, value)) or by passing the property
in on the command line (-Dkey=value). This is the property I used with JSSE,
and it works fine.

java.protocol.handler.pkgs = com.sun.net.ssl.internal.www.protocol

If anything, I would argue that the bug here is to report the
MalformedURLException in RequestUtils.absoluteURL to a log file.

Dan Miser

>From: "Michael Wilimsky" <[EMAIL PROTECTED]>
>Reply-To: [EMAIL PROTECTED]
>To: <[EMAIL PROTECTED]>
>Subject: SSL and Struts
>Date: Tue, 10 Apr 2001 17:54:48 +0200
>
>i tried to establish a SSL-Connection with Tomcat / Struts using openSSL
>
>but when using https protocol url-rewriting seems to fail somehow... is
>there a solution for that...
>
>p.s. i am working on a w2k machine with ie5
>
>michael
>

_
Get your FREE download of MSN Explorer at http://explorer.msn.com

Re: SSL and Struts

[Dan Miser]

Here's the reply I just posted on Bugzilla about this:

This isn't a bug of Struts, but a misconfiguration of SSL. In addition to 
the comments in Tomcat's server.xml, you need to define a system property to 
tell Java where it should find the classes for SSL support. You can do this 
either in code (System.setProperty(key, value)) or by passing the property 
in on the command line (-Dkey=value). This is the property I used with JSSE, 
and it works fine.

java.protocol.handler.pkgs = com.sun.net.ssl.internal.www.protocol

If anything, I would argue that the bug here is to report the 
MalformedURLException in RequestUtils.absoluteURL to a log file.

Dan Miser

>From: "Michael Wilimsky" <[EMAIL PROTECTED]>
>Reply-To: [EMAIL PROTECTED]
>To: <[EMAIL PROTECTED]>
>Subject: SSL and Struts
>Date: Tue, 10 Apr 2001 17:54:48 +0200
>
>i tried to establish a SSL-Connection with Tomcat / Struts using openSSL
>
>but when using https protocol url-rewriting seems to fail somehow... is
>there a solution for that...
>
>p.s. i am working on a w2k machine with ie5
>
>michael
>

_
Get your FREE download of MSN Explorer at http://explorer.msn.com

SSL and Struts

[Michael Wilimsky]

i tried to establish a SSL-Connection with Tomcat / Struts using openSSL

but when using https protocol url-rewriting seems to fail somehow... is
there a solution for that...

p.s. i am working on a w2k machine with ie5

michael