Just a quick add-on

It seems the site remain secure even If I don't continue to use the
<sslext:form> tag.

I assume it is secure.

New to ssl. As long as the little padlock in the corner appears locked (IE
5.x), does that mean the information sent and recevied is encrypted.

Therefore, do I not need to keep useing hte sslext:form tag for the rest of
the site.

If this is the case, how do I break out of secure mode? say when a person
log's out?

Thanks in advance

Steve Vanspall



-----Original Message-----
From: Steve Vanspall [mailto:[EMAIL PROTECTED]]
Sent: Monday, 6 January 2003 2:51 PM
To: Struts User Mailing List
Subject: SSLext Struts-1.1-b2


Hi there.

I am going to be as precise as I can with this one.

I have been having this problem for a while now, and as yet, no solution.

I am converting my web-app to use SSL for some of the pages.

I use Steve Ditlinger's SSL extension.

I am using Struts 1.1 B2

and Tomcat 4.1.18 (just upgraded from 4.1.12, was having the problem with
this version also)

Basically, my login works, I then go to a menu page. If I click an option on
that page. It forwards to another action, that checks the last page the user
was viewing. In this case there will be no page. So it goes to the default
search page. This is where I have my problem.

I would like the search page to be secure.

If I use normal <html:form> tags, the page works. However if I make the tage
<sslext:form> tags. I get a:

javax.servlet.jsp.JspException: Cannot find bean
org.apache.struts.taglib.html.BEAN in any scope

Exception thrown.

Below are the details of what I have coded.


The login page (which works fine) uses the sslext:form tag like so

***************************

<sslext:form action="/login">
<html:text property="userid" styleClass="inputStandard"/>
<input name="userpassword" type="password" class="inputStandard">
</sslext:form>

***************************

Naturally, there is other formatting in between the tags listed above,
however they are standard HTML, so don't affect the JSP.

Anyway, this works.

It passes itself to a LoginAction class

This succesfully forwards itself to a menu page, with a list of links that.
These are standard link, not secure links.

****************************

<tr onMouseOver="filterNodes(this.childNodes, 'hand');"
onMouseOut="restoreNodes(this.childNodes);"
onClick="self.location.href='checkcustpageaction.do';">
<td UNSELECTABLE="on"><li>&nbsp;</li></td>
<td UNSELECTABLE="on"><font size="3" color="#000066"><u><b>Main Customer
List</b></u></font></td>
</tr>

****************************

If you click Main Customer List, you are forwarded to another action, this
is the one that checks if this user has is returning to that section. And
therefore goes to the last page the user was viewing, otherwise (as in this
case) it goes to the search page.

This is how the form, on this page, was originally.

****************************************

<html:form action="/custsearch.do">
<html:text property="srchIpId" size="10" maxlength="8"
styleClass="inputStandard"/>
<html:text property="srchFirstName" size="20" maxlength="20"
styleClass="inputStandard"/>
<html:text property="srchLastName" size="20" maxlength="20"
styleClass="inputStandard"/>
<html:text property="srchIdText" size="20" maxlength="20"
styleClass="inputStandard"/>
<html:select property="srchIpType">
        <option value="">--</option>
        <html:option value="PRIMARY">Primary Contact</html:option>
        <html:option value="MEMBER">Member</html:option>
        <html:option value="PERSON">Person</html:option>
</html:select>
<html:text property="srchStreetName" styleClass="inputStandard"/>
<html:text property="srchCity" size="20" maxlength="20"
styleClass="inputStandard"/>
<html:text property="srchPostCode" size="20" maxlength="20"
styleClass="inputStandard"/>
<input type="image" name="search" src="images/search_off.gif"
onMouseOut="MM_swapImgRestore()" onMouseUp="MM_swapImgRestore()"
onMouseDown="MM_swapImage('search','','images/search_on.gif',1)"
onClick="this.form.action.value='SEARCH';" align="absmiddle">
<a
href="addcustippre.do?<%=Const.CURRENT_PAGE%>=<%=Const.getCurrentPage(reques
t)%>&currentTime=<%=System.currentTimeMillis()%>"
onMouseOut="MM_swapImgRestore()" onMouseUp="MM_swapImgRestore()"
onMouseDown="MM_swapImage('addmember','','images/add_member_on.gif',1)"
><img src="images/add_member_off.gif"  name="addmember" align="center"
border=0 ></a>
</html:form>

**************************************

As I said earlier, this works, however if I change the form tags from
<html:form action="/custsearch.do"></html:form> to <sslext:form
action="/custsearch"></sslext:form>

I get the exception I mentioned at the top of this message.

javax.servlet.jsp.JspException: Cannot find bean
org.apache.struts.taglib.html.BEAN in any scope

Having debugged using the source code. I know it is looking for the Form
Bean for that action. But don't understand why it can't access it.

It is supposed to create a new instance of it if it is not in session.

Any help would be appreciated.


Regards

Steve Vanspall


--
To unsubscribe, e-mail:
<mailto:[EMAIL PROTECTED]>
For additional commands, e-mail:
<mailto:[EMAIL PROTECTED]>


--
To unsubscribe, e-mail:   <mailto:[EMAIL PROTECTED]>
For additional commands, e-mail: <mailto:[EMAIL PROTECTED]>

Reply via email to