I forgot to mention that

<DefaultContext cookies="false">
</DefaultContext>

should be placed in <host> tag of the server.xml.

att: this will apply to all contexts by default. to do this
for jetspeed only, you have to create a separate context
for jetspeed (it's in the tomcat manual).

joachim


> -----Ursprungliche Nachricht-----
> Von: Joachim Muller [mailto:[EMAIL PROTECTED]]
> Gesendet: Mittwoch, 19. Februar 2003 10:18
> An: Jetspeed Users List
> Betreff: AW: SSL question
> 
> 
> 
> I did not do it, but I guess you have to: 
> 
> 1.) configure tomcat to accept SSL connections
> http://jakarta.apache.org/tomcat/tomcat-4.1-doc/ssl-howto.html
> 
> 
> 2.) make sure your session ID will always be transported in the URL and not with 
>cookies since session IDs stored in 
> cookies will be lost by changing from http to https (change in URL -> cookies refer 
>to the URL).
> 
> add:
> 
> <DefaultContext cookies="false">
> </DefaultContext>
> 
> to your server.xml at TOMCAT_HOME/conf
> 
> 
> 3.) change the form action URL of the login forms manually from http to https (incl. 
>the right port)
> 
> 
> 
> Hope this helps.
> 
> 
> Joachim
> 
> 
> 
> > -----Ursprungliche Nachricht-----
> > Von: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]
> > Gesendet: Mittwoch, 19. Februar 2003 09:30
> > An: Jetspeed Users List
> > Betreff: SSL question
> > 
> > 
> > Hi all!
> > I would like to know more on ssl support in jetspeed.
> > What does it means :
> > # -------------------------------------------------------------------
> > #
> > #  S E C U R E  S O C K E T S  L A Y E R
> > #
> > # -------------------------------------------------------------------
> > # Whether the web server is able to use SSL.  Links in Turbine can
> > # check this property to determine if SSL can be used.
> > #
> > # Default: true
> > # -------------------------------------------------------------------
> > 
> > use.ssl=true
> > 
> > in TurbineResource.properties.
> > 
> > What can i have to do if i want to access portal homepage using http and
> > user homepage using https?
> > 
> > Thanx to all!
> > 
> > 
> > ---------------------------------------------------------------------
> > To unsubscribe, e-mail: [EMAIL PROTECTED]
> > For additional commands, e-mail: [EMAIL PROTECTED]
> > 


Reply via email to