SSLEXT

2004-03-17 Thread Joao Batistella
Hello. I'm now using the SSLEXT for struts (following some advices frm the list). Now I have my login action protected by HTTPS, but I want the user, after login, being forward to the main page of the application using HTTP protocol. Is this possible? Or I can only change the protocol

RE: SSLEXT

2004-03-17 Thread Robert Taylor
Use the sslext:pageScheme secure=false/ on the main page. This should switch it back to HTTP. robert -Original Message- From: Joao Batistella [mailto:[EMAIL PROTECTED] Sent: Wednesday, March 17, 2004 9:58 AM To: 'Struts Users Mailing List' Subject: SSLEXT Hello. I'm now

RE: SSLEXT

2004-03-17 Thread Joao Batistella
I can't. Because my main page is not a page at all. It's a Tiles definition. Where can I find the documentation about SSLEXT? I mean the description of the tags? Thanks, JP -Original Message- From: Robert Taylor [mailto:[EMAIL PROTECTED] Sent: quarta-feira, 17 de março de 2004 15:09

RE: SSLEXT

2004-03-17 Thread Brendan Richards
if I'm wrong :) -Original Message- From: Joao Batistella [mailto:[EMAIL PROTECTED] Sent: 17 March 2004 14:58 To: 'Struts Users Mailing List' Subject: SSLEXT Hello. I'm now using the SSLEXT for struts (following some advices frm the list). Now I have my login action protected by HTTPS

RE: SSLEXT

2004-03-17 Thread Robert Taylor
To: 'Struts Users Mailing List' Subject: RE: SSLEXT I can't. Because my main page is not a page at all. It's a Tiles definition. Where can I find the documentation about SSLEXT? I mean the description of the tags? Thanks, JP -Original Message- From: Robert Taylor [mailto:[EMAIL

RE: SSLEXT

2004-03-17 Thread Joao Batistella
the user to a non secure page? Thanks, JP -Original Message- From: Robert Taylor [mailto:[EMAIL PROTECTED] Sent: quarta-feira, 17 de março de 2004 15:29 To: Struts Users Mailing List Subject: RE: SSLEXT Okay. Then you should be able to place the following in your struts-config action

RE: SSLEXT

2004-03-17 Thread Robert Taylor
:[EMAIL PROTECTED] Sent: Wednesday, March 17, 2004 10:39 AM To: 'Struts Users Mailing List' Subject: RE: SSLEXT Ok, but the main page is still in HTTPS. Let me try to explain the flow: 1. User enter with username and password 2. User submit the form to an HTTPS address 3. A LoginAction try

RE: SSLEXT

2004-03-17 Thread Robert Taylor
Correction: ...in that action mapping configuration define it to be non-secure using the set-property element. -Original Message- From: Robert Taylor [mailto:[EMAIL PROTECTED] Sent: Wednesday, March 17, 2004 10:52 AM To: Struts Users Mailing List Subject: RE: SSLEXT Yes. Instead

RE: SSLEXT

2004-03-17 Thread Robert Taylor
value=false/ /action Note that prefix is what ever prefix you are using to invoke the Struts ActionServlet. robert -Original Message- From: Joao Batistella [mailto:[EMAIL PROTECTED] Sent: Wednesday, March 17, 2004 11:19 AM To: 'Struts Users Mailing List' Subject: RE: SSLEXT Thanks

RE: SSLEXT

2004-03-17 Thread Joao Batistella
! -Original Message- From: Robert Taylor [mailto:[EMAIL PROTECTED] Sent: quarta-feira, 17 de março de 2004 16:35 To: Struts Users Mailing List Subject: RE: SSLEXT The following should work without changing any code in your LoginAction: action path=/login type

RE: SSLEXT

2004-03-17 Thread Robert Taylor
:[EMAIL PROTECTED] Sent: Wednesday, March 17, 2004 11:51 AM To: 'Struts Users Mailing List' Subject: RE: SSLEXT Thanks again. But now I have this error message: java.lang.IllegalArgumentException: Path tiles.initial does not start with a / character This is because the following action

RE: SSLEXT

2004-03-17 Thread Joao Batistella
Mailing List Subject: RE: SSLEXT Hmmm. Okay, then try using your original action mapping def: action path=/initial type=org.apache.struts.actions.ForwardAction parameter=tiles.initial set-property property=secure value=false/ /action robert -Original Message

RE: SSLEXT

2004-03-17 Thread David Friedman
To: Struts Users Mailing List Subject: RE: SSLEXT Hmmm. Okay, then try using your original action mapping def: action path=/initial type=org.apache.struts.actions.ForwardAction parameter=tiles.initial set-property property=secure value=false/ /action robert -Original

RE: SSLEXT

2004-03-17 Thread Robert Taylor
messages? robert -Original Message- From: Joao Batistella [mailto:[EMAIL PROTECTED] Sent: Wednesday, March 17, 2004 12:10 PM To: 'Struts Users Mailing List' Subject: RE: SSLEXT I've already tried. But this doesn't work... I don't understand why... It seems that I'll have to create

RE: SSLEXT

2004-03-17 Thread Joao Batistella
=testlogin=test So, the user can see his user/password in the address. This could be a problem... Thanks again. -Original Message- From: Robert Taylor [mailto:[EMAIL PROTECTED] Sent: quarta-feira, 17 de março de 2004 17:28 To: Struts Users Mailing List Subject: RE: SSLEXT Did you correct

RE: SSLEXT

2004-03-17 Thread Joao Batistella
I've already solved this. I just put redirect=true in the forward config and it's ok. Thank you all. -Original Message- From: Joao Batistella [mailto:[EMAIL PROTECTED] Sent: quarta-feira, 17 de março de 2004 18:51 To: 'Struts Users Mailing List' Subject: RE: SSLEXT It works! Thank you

sslext http/https switching taglib and tiles

2004-03-13 Thread Adam Hardy
Is anybody using Tiles and the sslext taglib form link tags? I am thinking of using them with Tiles. Has this been implemented yet? I was wondering because I think it must be a fairly complicated algorithm to check whether a link URL or a form submit action needs HTTPS or not. I was also

RE: sslext http/https switching taglib and tiles

2004-03-13 Thread Robert Taylor
Adam, I've been using SecurityFilter (sslext taglib form and link tags) with Tiles for a while without any issues. robert -Original Message- From: Adam Hardy [mailto:[EMAIL PROTECTED] Sent: Saturday, March 13, 2004 11:25 AM To: Struts Users Mailing List Subject: sslext http/https

RE: Help setting up sslext

2003-10-20 Thread Brian McSweeney
=false/ At any rate, it doesn't seem to work the way I thought it would. For example, if you log into hotmail, it sends the username and password over ssl, and then switches back to http for the resulting pages. This it would seem is impossible to do with sslext because in order to switch back

Re: Help setting up sslext

2003-10-20 Thread Adam Hardy
Hi Brian, I don't use the sslext form tags. I don't mention sslext anywhere in my code or my JSP. It's purely a configuration thing. Are you setting up the SecurePlugin in struts-config? Also are sure that you are not specifying in the web.xml that the page should be protected by SSL? Do

RE: Help setting up sslext

2003-10-20 Thread Brian McSweeney
Thanks for the reply Adam. I'll address your tips one by one. I don't use the sslext form tags. I don't mention sslext anywhere in my code or my JSP. It's purely a configuration thing. Ok, this I did differently. I followed the examples downloaded with sslext And used sslext:form

Re: Help setting up sslext

2003-10-20 Thread Adam Hardy
Hmm. I've been trying to figure out what to do for my login pages since I've just upgraded from tomcat 4 to 5 and the strategy I was using before won't work anymore, plus I had a bug in mozilla which was caching the login page, so consequently my whole login strategy and use of sslext

Re: Help setting up sslext

2003-10-20 Thread Leonard Sitongia
I just started using sslext this morning, and I've run into the same issues that Brian McSweeney brought up in this thread. I was hoping to avoid using the taglib at all, as Adam Hardy said he does, so I dropped the sslext.jar in and made some changes to the struts-config. I found

Re: Help setting up sslext

2003-10-20 Thread Leonard Sitongia
On Monday 20 October 2003 1:21 pm, Leonard Sitongia wrote: I also find that the app does not switch out of https: The only page in which I've used the sslext tag is my login page. I'm going to try changing my other html:form tags over to sslext. I've found that the app switches out of https

Re: Help setting up sslext

2003-10-20 Thread Adam Hardy
On 10/20/2003 09:32 PM Leonard Sitongia wrote: On Monday 20 October 2003 1:21 pm, Leonard Sitongia wrote: I also find that the app does not switch out of https: The only page in which I've used the sslext tag is my login page. I'm going to try changing my other html:form tags over to sslext

Re: Help setting up sslext

2003-10-18 Thread Adam Hardy
The only time the protocol switches automatically (read: tomcat switches it automatically) is when you specify SSL in the web.xml for a URL. To get it to switch back from SSL into unencrypted, putting set-property property=secure value=false/ in the action mapping is necessary. HTH Adam On

Re: SSLExt and Struts Workflow?

2003-10-17 Thread Matthias Bauer
Tim, what you are saying seems pretty reasonable. Even though not having looked at SSLExt, I don't expect any more collisions than the action mapping type and the request processor. When saying that, I am assuming that SSLExt correctly copes with session tracking when switching back and forth

Re: Help setting up sslext

2003-10-17 Thread Adam Hardy
On 10/16/2003 05:13 PM Brian McSweeney wrote: a) Change the action-mappings in the struts-config.xml file action-mappings type=org.apache.struts.config.SecureActionConfig b) Change the web.xml file as follows: servlet-nameaction/servlet-name

RE: Help setting up sslext

2003-10-17 Thread Brian McSweeney
up sslext On 10/16/2003 05:13 PM Brian McSweeney wrote: a) Change the action-mappings in the struts-config.xml file action-mappings type=org.apache.struts.config.SecureActionConfig b) Change the web.xml file as follows: servlet-nameaction/servlet-name servlet

Re: SSLExt and Struts Workflow?

2003-10-17 Thread Tim Shadel
Thanks Matthias, I'm almost positive, the SSL/non-SSL session tracking is taken care in SSLExt of by URL rewriting as necessary. I'll keep an eye out for that as I test out my work. I'll let you know off-list if I have any questions. Thanks! Tim Matthias Bauer wrote: Tim, what you

Help setting up sslext

2003-10-16 Thread Brian McSweeney
Hi all, Searched the archives, but couldn't quite get a good simple explanation of how to set up sslext. Here's my progress so far: 1) Hook up ssl with your keystore etc on your container 2) Download sslext from sourceforge. 3) Install the sslext.jar in my WEB-INF/lib folder 4) Install

Re: SSLExt and Struts Workflow?

2003-10-16 Thread Tim Shadel
at the code, it appears that it may not be hard to change SSLExt to expect an Interface instead of a class in most areas that the SecureActionConfig is really needed for the config.getSecure() call (WorkflowMapping seems to hold more than simple get/set methods). It seems that the changes

Re: Re: SSLExt and Struts Workflow?

2003-10-16 Thread Steve Ditlinger
Tim: Without looking into it too deeply (and without knowing anything about Workflow), I can say the easiest thing from the sslext side is to redefine SecureActionConfig to extend WorkflowMapping, just as you say. If you have problems, I can look at it more. Steve From: Tim Shadel [EMAIL

Re: Issue with SSLExt and Tiles

2003-09-25 Thread Max Cooper
] To: struts [EMAIL PROTECTED] Sent: Wednesday, September 24, 2003 10:13 PM Subject: Issue with SSLExt and Tiles I have the following code that does not get processed correctly. Currently, the tiles:getAsString name='section_url'/ gets rendered as http://localhost:8080/tiles:getAsString%20name

Re: Issue with SSLExt and Tiles

2003-09-25 Thread Mick Knutson
PM Subject: Re: Issue with SSLExt and Tiles I don't think it is valid JSP syntax to nest tags like that. I have tried stuff like that in the past and concluded that you cannot use one JSP custom tag to render an attribute value for another JSP custom tag. This might be an alternative

SSLExt and useMap?

2003-09-25 Thread Mick Knutson
I have an HTML image map that needs to use the SSLExt links: pmap name=Map2 area shape=rect coords=17,0,84,26 href=/index.jsp area shape=rect coords=96,0,187,26 href=/member.do area shape=rect coords=204,0,284,26 href=/notification.do area shape=rect coords=302,0,406,26 href=/cms.do

Re: SSLExt and useMap?

2003-09-25 Thread Mick Knutson
I have an HTML image map that needs to use the SSLExt links: pmap name=Map2 area shape=rect coords=17,0,84,26 href=/index.jsp area shape=rect coords=96,0,187,26 href=/member.do area shape=rect coords=204,0,284,26 href=/notification.do area shape=rect coords=302,0,406,26 href

Re: SSLExt and useMap?

2003-09-25 Thread Max Cooper
sslext:rewrite / can render URLs to stick into the area href's. -Max - Original Message - From: Mick Knutson [EMAIL PROTECTED] To: struts [EMAIL PROTECTED] Sent: Thursday, September 25, 2003 1:23 PM Subject: Re: SSLExt and useMap? I have an HTML image map that needs to use

Re: SSLExt and useMap?

2003-09-25 Thread Mick Knutson
[EMAIL PROTECTED] Sent: Thursday, September 25, 2003 1:29 PM Subject: Re: SSLExt and useMap? sslext:rewrite / can render URLs to stick into the area href's. -Max - Original Message - From: Mick Knutson [EMAIL PROTECTED] To: struts [EMAIL PROTECTED] Sent: Thursday, September 25, 2003 1

Re: SSLExt and useMap?

2003-09-25 Thread Max Cooper
List [EMAIL PROTECTED] Sent: Thursday, September 25, 2003 1:36 PM Subject: Re: SSLExt and useMap? Do you mean Like: area shape=rect coords=17,0,84,26 href=sslext:rewrite name='/member.do'/ --- Thanks Mick Knutson http://www.baselogic.com +001(805) 563-0666 Office +001 (708) 570-2772

Re: SSLExt and useMap?

2003-09-25 Thread Mick Knutson
List [EMAIL PROTECTED] Sent: Thursday, September 25, 2003 1:40 PM Subject: Re: SSLExt and useMap? Yup, that's the technique I was thinking of. Even though that seems a little like nested tags, it really is not (and should work fine) because the area tag is just HTML rather than a JSP custom tag

Re: SSLExt and useMap?

2003-09-25 Thread Max Cooper
- From: Mick Knutson [EMAIL PROTECTED] To: Struts Users Mailing List [EMAIL PROTECTED] Sent: Thursday, September 25, 2003 1:51 PM Subject: Re: SSLExt and useMap? I added this: area shape=rect coords=96,0,187,26 href=sslext:rewrite name='/member.do'/ (and I also have this in other areas

Re: SSLExt and Struts Workflow?

2003-09-24 Thread Matthias Bauer
If you still want to use the sslext RequestProcessor you should be easily able to do that: It is fairly trivial to build an SSLExtWorkflowRequestProcessor in just the same way as the TilesWorkflowRequestProcesser is built, which is included in the Struts Workflow Extension. This is because all

Issue with SSLExt and Tiles

2003-09-24 Thread Mick Knutson
I have the following code that does not get processed correctly. Currently, the tiles:getAsString name='section_url'/ gets rendered as http://localhost:8080/tiles:getAsString%20name='section_url'/ sslext:link page=tiles:getAsString name='section_url'/

SSLExt and Struts Workflow?

2003-09-23 Thread Mick Knutson
Does SSLExt and Struts Workflow work together? --- Thanks Mick Knutson http://www.baselogic.com --- - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]

Re: SSLExt and Struts Workflow?

2003-09-23 Thread Steve Ditlinger
I'll admit to not having used Struts Workflow. But I don't know of any reason why sslext should not work, as long as actions are defined in a struts config file like other struts apps. If Struts Workflow uses its own RequestProcessor, you would not be able to use the sslext RequestProcessor

[ANN] new version of sslext for Struts 1.10 posted

2003-09-16 Thread Steve Ditlinger
Minor change to fix a bug in previously-posted version that could result in exceptions if the action specified in the sslext:link or sslext:form tags could not be found. sslext for Struts 1.10 - 3 is the latest version, available at http://sslext.sourceforge.net. I will be deprecating previous

Re: sslext can only get it to post

2003-09-15 Thread Craig R. McClanahan
On Sun, 14 Sep 2003, Max Cooper wrote: Some design changes are needed to make the switch to the https port in what I consider to be an acceptable manner. One avenue to explore is using one particular capability of container managed security, and declare a security constraint requiring SSL on a

Re: sslext can only get it to post

2003-09-15 Thread Steve Ditlinger
Yes, Tomcat's handling of the security-constraint is very complementary to the use of sslext. Unfortunately, unless this has changed recently, not all containers behave in this way. Weblogic, for instance, just creates a response that outputs a message to the browser stating that a particular

Re: sslext can only get it to post

2003-09-14 Thread Max Cooper
. By the time the app figures out that you want to go to the checkout, it is too late so sslext can't really help too much. The request has already been sent, and it wasn't secure. Some design changes are needed to make the switch to the https port in what I consider to be an acceptable manner. Here are some

sslext can only get it to post

2003-09-12 Thread Stephane Grenier
Hello all. I've added sslext to my struts application. However I can't seem to get it to post (the parameters are appended to the url). In the jsp, the form tag is: sslext:form action=ShoppingCartAction name=ShoppingCartForm type=com.rana.release.forms.ShoppingCartForm scope=request method

Re: sslext can only get it to post

2003-09-12 Thread Stephane Grenier
Mailing List [EMAIL PROTECTED] Sent: Friday, September 12, 2003 2:06 PM Subject: sslext can only get it to post Hello all. I've added sslext to my struts application. However I can't seem to get it to post (the parameters are appended to the url). In the jsp, the form tag is: sslext:form action

Re: sslext can only get it to post

2003-09-12 Thread Max Cooper
Stephane, The parameters are getting appended to the URL because sslext is doing a redirect. So the POST is probably working, but then sslext thinks the request should have arrived on the other port, and since you can't do a POST in a redirect, sslext appends the POSTed data to the URL as a query

Re: sslext can only get it to post

2003-09-12 Thread Stephane Grenier
for the help, Stephane - Original Message - From: Max Cooper [EMAIL PROTECTED] To: Struts Users Mailing List [EMAIL PROTECTED]; Stephane Grenier [EMAIL PROTECTED] Sent: Friday, September 12, 2003 5:41 PM Subject: Re: sslext can only get it to post Stephane, The parameters are getting appended

Struts, sslext, and DNS

2003-09-11 Thread Davide Bruzzone
://xxx.xxx.xxx.xxx/;). Additionally, a portion of the site is supposed to be protected by SSL. Since I'm using Struts and the Struts SSL extension, this is all handled automatically/internally (through struts-config.xml and the use of the appropriate sslext tags). However, when a form that points

sslext help

2003-09-11 Thread Stephane Grenier
param-value/WEB-INF/struts-config.xml/param-value /init-param taglib taglib-uri/WEB-INF/sslext.tld/taglib-uri taglib-location/WEB-INF/sslext.tld/taglib-location /taglib Now my initial jsp is : %@ taglib uri=/WEB-INF/sslext.tld prefix=sslext% %@ taglib uri=/WEB-INF/struts

Re: sslext help

2003-09-11 Thread Stephane Grenier
: Friday, September 12, 2003 1:20 AM Subject: sslext help Hello all. I'm trying to go from a shopping cart page to a checkout page. The shopping cart page is not secure but the checkout will be. I've been able to get there, but hitting the back button or refreshing crashes the webapp after a few

[Announce] Enhancement added to sslext

2003-09-06 Thread Ditlinger, Steve
New release of sslext now recognizes multiple mappings for the Struts action servlet, including the mixing of prefix and suffix mapping. For example, you can map *.do, *.foo, AND /do/* to the Struts action servlet. Sslext will recognize the mapping and create the link tag, form tag, etc

RE: [Announce] Enhancement added to sslext

2003-09-06 Thread Robert Taylor
: Saturday, September 06, 2003 3:18 AM To: '[EMAIL PROTECTED] ' Subject: [Announce] Enhancement added to sslext New release of sslext now recognizes multiple mappings for the Struts action servlet, including the mixing of prefix and suffix mapping. For example, you can map *.do, *.foo, AND /do

RE: [Announce] Enhancement added to sslext

2003-09-06 Thread Ditlinger, Steve
To: Struts Users Mailing List Subject: RE: [Announce] Enhancement added to sslext Steve that's good news...but do have any idea when the following bug will be fixed in SecureRequestProcessor? http://sourceforge.net/tracker/index.php?func=detailaid=790963 group_id=599 67atid=492653 robert

Re: [OT] sslext java.lang.IllegalStateException: sendError() failed- data has already been sent to client

2003-08-31 Thread Adam Hardy
-Original Message- From: Adam Hardy [mailto:[EMAIL PROTECTED] Sent: Saturday, August 30, 2003 9:45 AM To: Struts Users Mailing List Subject: Re: [OT] sslext java.lang.IllegalStateException: sendError() failed - data has already been sent to client It might sound like Microsoft Support Hotline

Re: [OT] sslext java.lang.IllegalStateException: sendError() failed- data has already been sent to client

2003-08-30 Thread Adam Hardy
It might sound like Microsoft Support Hotline, but you should upgrade to the full 1.1 release. Plus of interest would be the tomcat version. On 08/29/2003 11:22 PM Robert Taylor wrote: I'm using Struts1.1rc2 with sslext for Struts1.1rc2 and am seeing some peculiar behavior when an invalid path

RE: [OT] sslext java.lang.IllegalStateException: sendError() failed - data has already been sent to client

2003-08-30 Thread Robert Taylor
-Original Message- From: Adam Hardy [mailto:[EMAIL PROTECTED] Sent: Saturday, August 30, 2003 9:45 AM To: Struts Users Mailing List Subject: Re: [OT] sslext java.lang.IllegalStateException: sendError() failed - data has already been sent to client It might sound like Microsoft Support Hotline

[OT] sslext java.lang.IllegalStateException: sendError() failed - data has already been sent to client

2003-08-29 Thread Robert Taylor
I'm using Struts1.1rc2 with sslext for Struts1.1rc2 and am seeing some peculiar behavior when an invalid path is requested. What should happen is the RequestProcessor.processMapping() should recognize that there is no action mapping for the path, log a message, and send an 400 (Invalid Request

struts with SSLExt behind proxy

2003-08-21 Thread s m
Hello, We are using apache as a proxy server in front of weblogic. Struts is used in the application with SSLExt. When request is forwarded within the application, control directly goes to weblogic skipping the proxy server. i.e. 1) url: https://AppacheProxyServer/myapp/first.jsp 2) When any

RE: SSLEXT

2003-07-31 Thread Nagendra Kumar O V S
: SSLEXT Does it appends the form parameter values even when Method=POST?Regards,Amit.-Original Message-From: Nagendra Kumar O V S [mailto:[EMAIL PROTECTED]] Sent: Thursday, July 31, 2003 1:13 PMTo: [EMAIL PROTECTED]Subject: SSLEXThi,SSLEXT really works

SSLEXT

2003-07-30 Thread Nagendra Kumar O V S
SSLEXT really works great for me when i switch from "http" to "https". Well when i am in https mode i submit a form as post methods, however the subsequent page is not secured. Obviously the action redirects to http mode, that is ok wi

SSLEXT

2003-07-30 Thread Nagendra Kumar O V S
hi, SSLEXT really works great for me when i switch from "http" to "https". Well when i am in https mode i submit a form as post methods, however the subsequent page is not secured. Obviously the action redirects to h

RE: SSLEXT

2003-07-30 Thread Amit Rana
Does it appends the form parameter values even when Method=POST? Regards, Amit. -Original Message- From: Nagendra Kumar O V S [mailto:[EMAIL PROTECTED] Sent: Thursday, July 31, 2003 1:13 PM To: [EMAIL PROTECTED] Subject: SSLEXT hi,   SSLEXT really works great for me when i switch from

sslext

2003-07-25 Thread Nagendra Kumar O V S
hi, i am using struts1.1 with sslext . everything seems to be working fine , but one problem i observe is that, when the url is redirected , all the request parameters show up in the query string. how can i avoid it TAI --nagi

Re: sslext

2003-07-25 Thread Aleksandar Matijaca
Do you have a session established before you do this? Try doing your request.getSession(true); before executing the sslext pages... a.m. Nagendra Kumar O V S wrote: hi, i am using struts1.1 with sslext . everything seems to be working fine , but one problem i observe is that, when

Re: sslext

2003-07-25 Thread Nagendra Kumar O V S
--- From: Struts Users Mailing List Date: Friday, July 25, 2003 04:59:07 PM To: Struts Users Mailing List Subject: Re: sslext Do you have a session established before you do this? Try doing your request.getSession(true

Re: sslext

2003-07-25 Thread Aleksandar Matijaca
, July 25, 2003 04:59:07 PM /*To:*/ Struts Users Mailing List mailto:[EMAIL PROTECTED] /*Subject:*/ Re: sslext Do you have a session established before you do this? Try doing your request.getSession(true); before executing the sslext pages... a.m. Nagendra Kumar O V S wrote: hi, i am using

Re: sslext

2003-07-25 Thread Nagendra Kumar O V S
: sslext My page is not SSL, but my form does a https submit, and then it forwards on to "itself" - after submitting, the page IS https - and then I get only jsessionid in the line.I have asslext:pageScheme secure="false" /In my page right

Re: sslext

2003-07-25 Thread Aleksander . Matijara
you have cookies enabled and URL rewriting? Regards, a.m. Nagendra Kumar O V S [EMAIL PROTECTED] 25/07/2003 08:27 AM Please respond to Struts Users Mailing List To: [EMAIL PROTECTED] cc: Subject:Re: sslext hi thnx for the input. i did try

detailed: Re: SSLEXT- https to http QueryString shows up?

2003-07-24 Thread Aleksandar Matijaca
PROTECTED] Sent: Wednesday, July 23, 2003 5:35 PM To: Struts Users Mailing List Subject: Re: SSLEXT- https to http QueryString shows up? Hi there, I have experienced EXACTLY the same problem also - I wish I had a fix for it... I will come back to that problem sometime, for now, I am concentrating

SSLEXT- https to http QueryString shows up?

2003-07-23 Thread Mounagurusamy, Jayakumar (HAL)
SSLEXT really works great for me when I switch from http to https. Well when I am in https mode I submit a form as post methods, however the subsequent page is not secured. Obviously the action redirects to http mode, that is ok with me but it appends the form parameter values to the URL

Re: SSLEXT- https to http QueryString shows up?

2003-07-23 Thread Aleksandar Matijaca
the form sslext:form . /sslext:form then, when you do a forward to itself, everything is fine,..., and you see your page as in http Regards, a.m. Mounagurusamy, Jayakumar (HAL) wrote: SSLEXT really works great for me when I switch from http to https. Well when I am in https mode I

RE: SSLEXT- https to http QueryString shows up?

2003-07-23 Thread Ditlinger, Steve
via https also. Then switch protocols back to http for all links from that page. Steve -Original Message- From: Aleksandar Matijaca [mailto:[EMAIL PROTECTED] Sent: Wednesday, July 23, 2003 5:35 PM To: Struts Users Mailing List Subject: Re: SSLEXT- https to http QueryString shows up

Struts 1.10 final version *of sslext* released

2003-07-19 Thread Ditlinger, Steve
Find more info at sslext.sourceforge.net. Struts 1.10 final version is now released. New features (originally added in RC2, but not announced here): secure property for actions in struts config file now accepts values true, false AND any. A value of any means that the

sslext

2003-07-08 Thread Dhruva B. Reddy
I am using Struts 1.0 and Tomcat. I am trying to use sslext to submit a form securely. I just tried it with cookies disabled, and the URL does not get encoded. Here is a snippet... sslext:form action=formAction method=POST /sslext:form When I turn off security (i.e., set the secure

sslext for Struts 1.1RC2 with Struts 1.1

2003-07-03 Thread Greg Hess
Hi All, Does the sslext for Struts1.1RC2 work with the new 1.1 release? Cheers, Greg Hess Software Engineer Wrapped Apps Corporation 275 Michael Cowpland Dr. Suite 201 Ottawa, Ontario K2M

Re: sslext for Struts 1.1RC2 with Struts 1.1

2003-07-03 Thread David Erickson
Works for me, I recompiled it with the new libs tho. - Original Message - From: Greg Hess To: Struts Sent: Thursday, July 03, 2003 7:37 AM Subject: sslext for Struts 1.1RC2 with Struts 1.1 Hi All, Does the sslext for Struts1.1RC2 work with the new 1.1 release

Re: Anyone using SSLExt with Container Managed Security JAAS?

2003-06-27 Thread Raymond Penners
minutes to help yet? I guess that the number of people on this list having sslext knowledge is rather low, I am not getting any responses to my SSL ext related questions either. I posted this on SF and here: http://sourceforge.net/tracker/index.php?func=detailaid=738678group_id=59967atid=492656

Anyone using SSLExt with Container Managed Security JAAS?

2003-06-26 Thread Mick Knutson
Is Anyone using SSLExt with Container Managed Security JAAS? --- Thanks... Mick Knutson --- _ Add photos to your e-mail with MSN 8. Get 2 months FREE*. http://join.msn.com/?page=features/featuredemail

Re: Anyone using SSLExt with Container Managed Security JAAS?

2003-06-26 Thread Adam Hardy
I'm using tomcat container-managed security with a login form under SSL and a realm in JAAS. What's SSLExt? Adam Mick Knutson wrote: Is Anyone using SSLExt with Container Managed Security JAAS? --- Thanks... Mick Knutson

Re: Anyone using SSLExt with Container Managed Security JAAS?

2003-06-26 Thread Mick Knutson
? --- Thanks... Mick Knutson --- From: Adam Hardy [EMAIL PROTECTED] Reply-To: Struts Users Mailing List [EMAIL PROTECTED] To: Struts Users Mailing List [EMAIL PROTECTED] Subject: Re: Anyone using SSLExt with Container Managed Security JAAS? Date: Thu, 26 Jun 2003 23:07:01 +0200 I'm using tomcat

sslext

2003-06-06 Thread Rodrigo di Lorenzo Lopes
Dears, The tag sslext:link doesnt appear to work very well with html:rewrite... The link isnt render. I am using complete path to skip this problem... logic:iterate name=valueObjectproperty=addresses id=address tr td /td td sslext:link

Re: sslext

2003-06-06 Thread Mark Lowe
are you sure you not looking for the page attribute? sslext:link page=/main.do. On Thursday, Jun 5, 2003, at 15:02 Europe/London, Rodrigo di Lorenzo Lopes wrote: Dears, The tag sslext:link doesnt appear to work very well with html:rewrite... The link isnt render. I am using complete path

Re: sslext

2003-06-06 Thread Rodrigo di Lorenzo Lopes
Oh ! I am sorry sirs (I feel so stupid)... yes! page attribute works with sslext. Thanx a lot. Mark Lowe writes: are you sure you not looking for the page attribute? sslext:link page=/main.do. On Thursday, Jun 5, 2003, at 15:02 Europe/London, Rodrigo di Lorenzo Lopes wrote

[sslExt] Switching from HTTPS to HTTP and avoiding the You are about to be redirected to a connection.

2003-04-01 Thread Robert Taylor
destination. I don't currently see how the sslExt addresses this issue. If it does, can someone please let me know how. robert -Original Message- From: Robert Taylor [mailto:[EMAIL PROTECTED] Sent: Monday, March 31, 2003 2:17 PM To: [EMAIL PROTECTED] Subject: [sslEXt] You are about

[sslEXt] You are about to be redirected to a connection which is not secure....

2003-03-31 Thread Robert Taylor
I am using Struts1.1rc1 with the sslExtRC1-2. My current requirements don't allow me to have all requests go through the Struts Action servlet. (please don't lecture me on the benefits of all requests going through the controller...you're preachin' to the chior) I have a situation where I need to

[sslExt] tags not picking up port # change

2003-03-28 Thread Robert Taylor
I apologize if this double posts, but I sent it a while ago and haven't seen it yet, so I'm sending again: I just downloaded sslext-struts1.1RC1-2-src.zip and am trying to run the web app that comes with it. I changed the entries in the plug-in to reflect port 80 for http and port 443 for https

Re: [sslExt] tags not picking up port # change

2003-03-28 Thread Tim Shadel
again: I just downloaded sslext-struts1.1RC1-2-src.zip and am trying to run the web app that comes with it. I changed the entries in the plug-in to reflect port 80 for http and port 443 for https. plug-in className=org.apache.struts.action.SecurePlugIn set-property property=httpPort value=80

RE: [sslExt] tags not picking up port # change

2003-03-28 Thread Robert Taylor
Doh! I hate being stupid. Spot on Tim. Freakin' spot on. Thanks, robert -Original Message- From: Tim Shadel [mailto:[EMAIL PROTECTED] Sent: Friday, March 28, 2003 1:41 PM To: Struts Users Mailing List Subject: Re: [sslExt] tags not picking up port # change Did you change

Re:Another sslext-struts question

2003-03-18 Thread Konstantina Stamopoulou
Hello, Concerning my problem of using the sslext I would like to mention the I get the following exception - I should have mentioned it into my first e-mail but I didn't know which app was causing it - EXCEPTION SEVERE: Parsing error processing resource path java.net.ConnectException: Connection

Even newer release of sslext posted

2003-03-18 Thread Ditlinger, Steve
All: Yesterday's posting of new releases of sslext was to fix a bug that had been reported a few days previously. Now we have a new release with a new feature that I am pretty excited about. A little background: Some older browsers (notable Netscape 4.x) would treat responses from a server

Another sslext-struts question

2003-03-17 Thread Konstantina Stamopoulou
Hello all, I'm trying to install the sslext-struts to toggle between https and http requests. I have downloaded the sslext-struts-1.1RC1 and I have copied the /web directory-which contains the demo app- into my webapps. I have enabled the SSL in Tomcat, copied the jnet.jar,jcert.jar,jsse.jar

Re: Another sslext-struts question

2003-03-17 Thread Jamesey
have you done the RSA certification bit?? Konstantina Stamopoulou [EMAIL PROTECTED] wrote in message news:[EMAIL PROTECTED] Hello all, I'm trying to install the sslext-struts to toggle between https and http requests. I have downloaded the sslext-struts-1.1RC1 and I have copied the /web

Re: Another sslext-struts question

2003-03-17 Thread Konstantina Stamopoulou
Hello James, If you mean the RSA certification using the keytool, yes I have done it -as part of tomcat SSL configuration . Konstantina - Original Message - From: Jamesey [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Monday, March 17, 2003 3:16 PM Subject: Re: Another sslext-struts

  1   2   >