Am Montag, 13. Januar 2003 09:15 schrieb Bengt Bäverman:
> Is there anything that prevents me from using Struts when I need to use
> HTTPS ?

Hi, 

there is no problem to be expected with Struts and HTTPS. HTTPS
is handled transparently to the application by the server, and the
app components - may it be Struts or something else - are behind
that. Considering certificates, you might want to check out the
JSSE extensions available from java.sun.com. You can either
make that a system extension (by just copying the .jar files to
the /jre/lib/ext directory or setting the JSSE_HOME variable
to point at the JSSE dirs. Then, using the keytool app that comes
with the JDK, generate the keys and tell the server where to find
them. If you're using Tomcat, there is an SSL-HowTo included
in the documentation describing each and every detail, so you
can't go wrong. Note that both the passwords for the keystore
(you can have multiple ones) and the tomcat user have to be
identical, but they don't necessarily have to be 'changeit', which
is the default. If something goes wrong, just delete the .keystore
file and try again. If you're using explicit keystores reserved for
the Tomcat server, you may have to edit server.xml (you'll
have to remove the comments for enabling the SSL adapter
anyway), specifying the keystoreFile and keystorePass
attributes as needed (yes, you have to provide the password
in clear text, so protect the file :).  But as I said, there is
an SSL-HowTo included in the Tomcat documentation, so
I'll better stop being redundant.

HTH,

-- Chris (SCPJ2)

> /Bengt B
>
> ps
>   If I only had a certificate I could try this myself but, alas, I don't.
> ds

==========================================================================To 
unsubscribe: mailto [EMAIL PROTECTED] with body: "signoff JSP-INTEREST".
For digest: mailto [EMAIL PROTECTED] with body: "set JSP-INTEREST DIGEST".
Some relevant FAQs on JSP/Servlets can be found at:

 http://archives.java.sun.com/jsp-interest.html
 http://java.sun.com/products/jsp/faq.html
 http://www.esperanto.org.nz/jsp/jspfaq.jsp
 http://www.jguru.com/faq/index.jsp
 http://www.jspinsider.com

Reply via email to