----- Original Message -----
From: "akoo" <[EMAIL PROTECTED]>
To: <[email protected]>
Sent: Tuesday, May 20, 2008 8:29 PM
Subject: excluding one webapp from SSL
Hello,
I have tomcat configured to use SSL and none ssl request is redirected to
have ssl. Is there way I can exclude one of the webapps in tomcat from
having to be requested using ssl?
If the pages are password protected you can use
<security-constraint>
<user-data-constraint>
<transport-guarantee>CONFIDENTIAL</transport-guarantee>
</user-data-constraint>
</security-constraint>
redirectPort="443"
in the standard port 80 connector makes them all use SLL
And it becomes fun if you using SSL on non protected pages.
Then (I think) you have to drop the above techniques in favor of checking
for SSL with
request.isSecure()
and redirecting to the HTTPs link yourself..
and not doing that if you dont want that.
Probably the easiest is to protect the pages that need SSL and use
security-constraint
although I have always done the test myself in code because that means the
admin guy cant screw up.
Maybe there are some other ways... those are the ones I'm aware of
---------------------------------------------------------------------------
HARBOR: http://coolharbor.100free.com/index.htm
The most powerful application server on earth.
The only real POJO Application Server.
---------------------------------------------------------------------------
---------------------------------------------------------------------
To start a new topic, e-mail: [email protected]
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
