Re: How do I force redirects from http: to https:

2007-05-01 Thread Rob Tanner
Chuck,

Thanks! Redirects are now working.


-- Rob



Caldarale, Charles R said the following on 05/01/2007 10:44 AM:
>> From: Rob Tanner [mailto:[EMAIL PROTECTED] 
>> Subject: How do I force redirects from http: to https:
>>
>> I have a redirectPort="443" argument in the port 80 connector
>> description in server.xml, but that doesn't seem to be doing anything.
>> 
>
> It won't until you specify a security constraint for the webapps (or
> portions thereof) that need to be protected.  You need to become
> familiar with the servlet spec, especially section 12.  You can find the
> spec here:
> http://jcp.org/aboutJava/communityprocess/mrel/jsr154/index.html
>
>  - Chuck
>
>
> THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY
> MATERIAL and is thus for use only by the intended recipient. If you
> received this in error, please contact the sender and delete the e-mail
> and its attachments from all computers.
>
> -
> To start a new topic, e-mail: users@tomcat.apache.org
> To unsubscribe, e-mail: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]
>
>   



smime.p7s
Description: S/MIME Cryptographic Signature


RE: How do I force redirects from http: to https:

2007-05-01 Thread Caldarale, Charles R
> From: Rob Tanner [mailto:[EMAIL PROTECTED] 
> Subject: How do I force redirects from http: to https:
> 
> I have a redirectPort="443" argument in the port 80 connector
> description in server.xml, but that doesn't seem to be doing anything.

It won't until you specify a security constraint for the webapps (or
portions thereof) that need to be protected.  You need to become
familiar with the servlet spec, especially section 12.  You can find the
spec here:
http://jcp.org/aboutJava/communityprocess/mrel/jsr154/index.html

 - Chuck


THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY
MATERIAL and is thus for use only by the intended recipient. If you
received this in error, please contact the sender and delete the e-mail
and its attachments from all computers.

-
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



How do I force redirects from http: to https:

2007-05-01 Thread Rob Tanner
Hi,

This is the first time I've worked with Tomcat as a stand-alone server
(i.e., not in conjunction with Apache).  My problem is that I want to
forcibly (but transparently) redirect all connections on port 80 to port
443 for SSL.  My problem is that I only know how to do that in Apache. 
I have a redirectPort="443" argument in the port 80 connector
description in server.xml, but that doesn't seem to be doing anything.

Here's the port 80 connector spec:




What's missing, or is that even where I need to specify the redirect?

Thanks,
Rob


-- 
Rob Tanner
UNIX Services Manager
Linfield College, McMinnville OR



smime.p7s
Description: S/MIME Cryptographic Signature