RE: http vs https And Windows

2001-08-20 Thread Greg Trasuk

I can help you with one thing - if you use "CATALINA RUN" rather than
"CATALINA START", then the window will stick around so you can see the
error.

Greg Trasuk, President
StratusCom Manufacturing Systems Inc. - We use information technology to
solve business problems on your plant floor.
http://stratuscom.ca

> -Original Message-
> From: Curtis Dougherty [mailto:[EMAIL PROTECTED]]
> Sent: Monday, August 20, 2001 12:40 PM
> To: '[EMAIL PROTECTED]'
> Subject: RE: http vs https And Windows
>
>
> I'll try reading it again...
> So here's a new twist (for all you Win2K folks) - When I specify
> keystorepath on a Win2K Pro / Win2K Server box...do I use
> "c:\someplace\like\here"
> or
> "c:\someplace\like\here\"
> or
> "c:/someplace/like/here"
> or
> "c:/someplace/like/here/"
>
> OR
> "c:\someplace\like\here"
> or
> "c:\someplace\like\here\.keystore"
> or
> "c:/someplace/like/here"
> or
> "c:/someplace/like/here/.keystore"
>
> The How-2 says "/path/to/.keystore" which is confusing this
> lowly simpleton
>
> Thanks
> cd
> -Original Message-
> From: John Baker [mailto:[EMAIL PROTECTED]]
> Sent: Monday, August 20, 2001 11:10 AM
> To: [EMAIL PROTECTED]
> Subject: Re: http vs https And Windows
>
>
> On Monday 20 August 2001 14:11 pm, you wrote:
> > I followed the SSL-How-2 and Still could NOT get
> "/examples" to load via
> > the SSL link?
> >
> Read it again? :-)
>
> I can happily make SSL work, but only on Linux. I have
> created the .keystore
>
> in Win2k, but of course, when I start tomcat the batch window
> scrolls past
> me
> and closes - so I dont get to see the error. I think I just
> haven't got a
> .keystore in the correct place.
>
> Oh, as well as me asking where the keystore should go, how
> the hell do I
> stop
> that stupid dos box window scrolling past me (catalina.bat
> creates a new
> java
> process, which creates a new dos box)? It's driving me
> insane. I don't
> understand how people develop on win2k!
>
> Another one of my favourites with win2k is how the lack of
> any obvious way
> of
> setting the working directory if you start tomcat as a
> service. I know a
> working directory can be set by the workDir on the context in
> the server.xml
>
> file, yet it seems to totally ignore this and still look in
> c:\winnt\system32.  :)
>
> --
> John Baker, BSc CS.
> Java Developer, TEAM Slb. (http://www.teamenergy.com)
> The views expressed in this mail are my own.




RE: http vs https And Windows

2001-08-20 Thread Curtis Dougherty

I'll try reading it again...
So here's a new twist (for all you Win2K folks) - When I specify
keystorepath on a Win2K Pro / Win2K Server box...do I use 
"c:\someplace\like\here"
or
"c:\someplace\like\here\"
or
"c:/someplace/like/here"
or
"c:/someplace/like/here/"

OR
"c:\someplace\like\here"
or
"c:\someplace\like\here\.keystore"
or
"c:/someplace/like/here"
or
"c:/someplace/like/here/.keystore"

The How-2 says "/path/to/.keystore" which is confusing this lowly simpleton

Thanks
cd
-Original Message-
From: John Baker [mailto:[EMAIL PROTECTED]]
Sent: Monday, August 20, 2001 11:10 AM
To: [EMAIL PROTECTED]
Subject: Re: http vs https And Windows


On Monday 20 August 2001 14:11 pm, you wrote:
> I followed the SSL-How-2 and Still could NOT get "/examples" to load via
> the SSL link?
>
Read it again? :-)

I can happily make SSL work, but only on Linux. I have created the .keystore

in Win2k, but of course, when I start tomcat the batch window scrolls past
me 
and closes - so I dont get to see the error. I think I just haven't got a 
.keystore in the correct place. 

Oh, as well as me asking where the keystore should go, how the hell do I
stop 
that stupid dos box window scrolling past me (catalina.bat creates a new
java 
process, which creates a new dos box)? It's driving me insane. I don't 
understand how people develop on win2k!

Another one of my favourites with win2k is how the lack of any obvious way
of 
setting the working directory if you start tomcat as a service. I know a 
working directory can be set by the workDir on the context in the server.xml

file, yet it seems to totally ignore this and still look in 
c:\winnt\system32.  :)

-- 
John Baker, BSc CS.
Java Developer, TEAM Slb. (http://www.teamenergy.com)
The views expressed in this mail are my own.



Re: http vs https And Windows

2001-08-20 Thread John Baker

On Monday 20 August 2001 14:11 pm, you wrote:
> I followed the SSL-How-2 and Still could NOT get "/examples" to load via
> the SSL link?
>
Read it again? :-)

I can happily make SSL work, but only on Linux. I have created the .keystore 
in Win2k, but of course, when I start tomcat the batch window scrolls past me 
and closes - so I dont get to see the error. I think I just haven't got a 
.keystore in the correct place. 

Oh, as well as me asking where the keystore should go, how the hell do I stop 
that stupid dos box window scrolling past me (catalina.bat creates a new java 
process, which creates a new dos box)? It's driving me insane. I don't 
understand how people develop on win2k!

Another one of my favourites with win2k is how the lack of any obvious way of 
setting the working directory if you start tomcat as a service. I know a 
working directory can be set by the workDir on the context in the server.xml 
file, yet it seems to totally ignore this and still look in 
c:\winnt\system32.  :)

-- 
John Baker, BSc CS.
Java Developer, TEAM Slb. (http://www.teamenergy.com)
The views expressed in this mail are my own.



Re: http vs https

2001-08-20 Thread Rob S.

> They are using IIS. That just about sums up the collective IQ.

I hear what you're saying, but banging our heads against the wall for something they 
should arguably be providing...  =)
 
> I'm still keen to know how to get the servlet context path for a web
> application.. ie how to get /examples of the examples application. :)

http://host:port/path/to/requested/doc/doc.extension

---> ^

I think you might be able to get that... I had a similar question a long time ago, and 
searching Google for "CGI variables" or something was fruitful.  GL!

- r




RE: http vs https

2001-08-20 Thread Curtis Dougherty

I followed the SSL-How-2 and Still could NOT get "/examples" to load via the
SSL link?  

Any ideas?

-Original Message-
From: John Baker [mailto:[EMAIL PROTECTED]]
Sent: Monday, August 20, 2001 8:09 AM
To: [EMAIL PROTECTED]
Subject: Re: http vs https


On Monday 20 August 2001 03:15 am, you wrote:
> > You must be joking. We're charging them :) It's just the twisted way
they
> > like to deploy things.
>
> "their own SSL accelerator" sounded like they had their own... my bad =)
>
> > but of course that needs to be:
> >
> > https://whatever
> >
> > if the accelarator is in use.
>
> Wouldn't *any* web server behind this accelerator have a similar problem?
> Where it wouldn't know that it's being SSL'd and thus return HTTP as the
> scheme?  Sounds to me like something the authors of this accelerator
should
> know about... actually deploying it =)

They are using IIS. That just about sums up the collective IQ.

I'm still keen to know how to get the servlet context path for a web 
application.. ie how to get /examples of the examples application. :)

-- 
John Baker, BSc CS.
Java Developer, TEAM Slb. (http://www.teamenergy.com)
The views expressed in this mail are my own.



Re: http vs https

2001-08-20 Thread John Baker

On Monday 20 August 2001 03:15 am, you wrote:
> > You must be joking. We're charging them :) It's just the twisted way they
> > like to deploy things.
>
> "their own SSL accelerator" sounded like they had their own... my bad =)
>
> > but of course that needs to be:
> >
> > https://whatever
> >
> > if the accelarator is in use.
>
> Wouldn't *any* web server behind this accelerator have a similar problem?
> Where it wouldn't know that it's being SSL'd and thus return HTTP as the
> scheme?  Sounds to me like something the authors of this accelerator should
> know about... actually deploying it =)

They are using IIS. That just about sums up the collective IQ.

I'm still keen to know how to get the servlet context path for a web 
application.. ie how to get /examples of the examples application. :)

-- 
John Baker, BSc CS.
Java Developer, TEAM Slb. (http://www.teamenergy.com)
The views expressed in this mail are my own.



RE: http vs https

2001-08-19 Thread Rob S.

> You must be joking. We're charging them :) It's just the twisted way they
> like to deploy things.

"their own SSL accelerator" sounded like they had their own... my bad =)

> but of course that needs to be:
>
> https://whatever
>
> if the accelarator is in use.

Wouldn't *any* web server behind this accelerator have a similar problem?
Where it wouldn't know that it's being SSL'd and thus return HTTP as the
scheme?  Sounds to me like something the authors of this accelerator should
know about... actually deploying it =)

- r




Re: http vs https

2001-08-19 Thread John Baker

On Saturday 18 August 2001 17:17 pm, you wrote:
> > without the SSL engine. They want to use their own SSL
> > accelarator however
>
> No doubt one they're going to charge your company for!
>
You must be joking. We're charging them :) It's just the twisted way they 
like to deploy things.

> > It must detect that as it isn't doing the SSL, and the SSL
> > accelarator has
> > decoded the SSL stream from the user, the connection is insecure and it
> > therefore uses HTTP and not HTTPS.
>
> I would agree.  Tomcat has no knowledge that SSL is in use and returns the
> appropriate URL.
>
> > Is there anyway to override this behaviour?
>
> Hmm...  generate all URLs by hand with a custom tag?
>
> /someDir/somePage.jsp
>
> ...and I don't think you'd be able to use a RequestDispatcher to forward
> requests either.  Maybe one of the TC devs can reply if interceptors or
> valves or something could help.
>
> I'm not too experienced with all of this, but I figured I'd try and help
> out nonetheless ;)
>
ta :) Well I can't really recode the urls. I have no problems using my own 
urls, infact I have an object which reads a .rc file that tells the web 
engine where it's deployed, so it can create links like:

<%= WebDefaults.ROOT_PATH + "myImages/moo.gif" %>

WebDefaults.ROOT_PATH is the path from / that this jsp is deployed. But I 
started using this in my novice days. I'm sure there is a method to get that 
for me ? :)

The actualy problem is the initial redirect when the client says to the 
server:

GET / HTTP/1.0

and the server returns a redirect to:

http://whatever/index.jsp

but of course that needs to be:

https://whatever

if the accelarator is in use.


John

> - r

-- 
John Baker, BSc CS.
Java Developer, TEAM Slb. (http://www.teamenergy.com)
The views expressed in this mail are my own.



RE: http vs https

2001-08-18 Thread Rob S.

> without the SSL engine. They want to use their own SSL
> accelarator however

No doubt one they're going to charge your company for!

> It must detect that as it isn't doing the SSL, and the SSL
> accelarator has
> decoded the SSL stream from the user, the connection is insecure and it
> therefore uses HTTP and not HTTPS.

I would agree.  Tomcat has no knowledge that SSL is in use and returns the
appropriate URL.

> Is there anyway to override this behaviour?

Hmm...  generate all URLs by hand with a custom tag?

/someDir/somePage.jsp

...and I don't think you'd be able to use a RequestDispatcher to forward
requests either.  Maybe one of the TC devs can reply if interceptors or
valves or something could help.

I'm not too experienced with all of this, but I figured I'd try and help out
nonetheless ;)

- r