-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Robedan,

On 7/13/2010 11:05 AM, Robedan wrote:
> I have an application that has a Web interface using an embeded Tomcat 4
> Server. I need to make it available to users over the Internet and want to
> secure it with SSL. It originally worked on port 8080 but I successfully
> modified the SERVER.XML to make it work over port 80. I also sucessfully
> created an SSL connector so that if you specify https://myserver.domain.com
> you can access the app over SSL on port 443. The final piece of the puzzle
> I've been struggling with is automatically redirecting http: requests to
> https: All the Tomcat forums say this is pretty simple, all you need to do
> is add a bit of code to either the server or app's web.xml:

That should be all you need (the CONFIDENTIAL bit). Can you post all
active <Connector> elements from your conf/server.xml file?

Your <transport-guarantee> looks good, although you mentioned that it
was your conf/web.xml, which is all wrong. The web.xml file should be in
your webapp's deployment directory under WEB-INF/web.xml.

Tomcat loads conf/web.xml as defaults for all webapps. It's best to put
webapp-specific configuration in the WEB-INF/web.xml for the specific
web application. That way, if you deploy it on another container, the
configuration goes with the webapp instead of staying behind in some
container-specific location.

Too bad about not being able to upgrade from TC 4. We were terrified of
upgrading for years, and then just decided to get the process rolling.
We were able to upgrade from 4.1 -> 5.5 and then to 6.0 with little to
no headaches at all. The webapp required no changes: only a slightly
different configuration for the container itself (for instance, logging,
JNDI DataSources, etc.). Your vendor needs to get with the program and
start supporting a version of Tomcat that was written in the last 5 years.

- -chris
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAkw97z4ACgkQ9CaO5/Lv0PDhHgCdFBU9qqtax+WBQNd4GHZGb82m
IAEAn1RhfbZfn1G3xHpHEMOfEDnCGErL
=1tbU
-----END PGP SIGNATURE-----

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Reply via email to