Re: How do I redirect all tomcat ports to use SSL?

[Bob Feretich]

The below <security-constraint> will make Tomcat require the use of SSL.
To have Tomcat automaitcally redirect for SSL, you must code

redirectPort="443"

as part of your port=80 connector definition in the server.xml file.

Regards,
Bob Feretich

Subject:
Re: How do I redirect all tomcat ports to use SSL?
From:
Fabian Pena <[EMAIL PROTECTED]>
Date:
Thu, 05 May 2005 14:20:28 -0300
To:
Tomcat Users List <tomcat-user@jakarta.apache.org>

This is an example

<security-constraint>
    <web-resource-collection>
      <web-resource-name>securePages</web-resource-name>
      <url-pattern>/index.jsp</url-pattern>
      <http-method>GET</http-method>
      <http-method>POST</http-method>
    </web-resource-collection>
    <auth-constraint>
      <role-name>*</role-name>
    </auth-constraint>
    <user-data-constraint>
      <transport-guarantee>CONFIDENTIAL</transport-guarantee>
    </user-data-constraint>
  </security-constraint>

Fabian
http://www.manentiasoftware.com

Donny R Rota wrote:
Thanks, I use security-constraints now, and I've been looking for this answer 
for weeks.
I've not found that option available.  Can you send me an URL to this?
In the mean time, I'm going to see if I can find that option in my other 
sources.
thanks!
...Don...

------------------------------------------------------------------
Don Rota, CTG Operations
Rational Software, IBM Software Group
20 Maguire Road, Lexington, MA 02421-3104 Tel: 781 676 2655, Fax: 781 676 7645 
[EMAIL PROTECTED]

Fabian Pena <[EMAIL PROTECTED]> 05/04/2005 04:51 PM
Please respond to
"Tomcat Users List"

To
Tomcat Users List <tomcat-user@jakarta.apache.org>
cc

Subject
Re: How do I redirect all tomcat ports to use SSL?

In a web application, you can edit your web.xml file and add a 
<security-constraint> to redirect all application requests to SSL.

I Hope this help

Fabian

Donny R Rota wrote:

This weeks puzzler  8^)

I want all my Tomcat requests to go through SSL.
I setup tomcat, and got port 80 and port 443 (SSL) working.
But I cannot redirect port 80 to 443.  I keep getting refused:

Is there a way in Tomcat to redirect all port 80 requests to SSL(443)?
I know you can do it the other way around 8443 -> 80.
I'm just running standalone Tomcat, no Apache.

advTHANKSance!
...Don...

------------------------------------------------------------------
Don Rota, CTG Operations
Rational Software, IBM Software Group
20 Maguire Road, Lexington, MA 02421-3104
Tel: 781 676 2655, Fax: 781 676 7645
[EMAIL PROTECTED]

---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]