Re: How do I redirect all tomcat ports to use SSL?

2005-05-05 Thread Fabian Pena
Software Group 20 Maguire Road, Lexington, MA 02421-3104 Tel: 781 676 2655, Fax: 781 676 7645 [EMAIL PROTECTED] Fabian Pena [EMAIL PROTECTED] 05/04/2005 04:51 PM Please respond to Tomcat Users List To Tomcat Users List tomcat-user@jakarta.apache.org cc Subject Re: How do I redirect all tomcat

Re: Moving from http to https doesnt expire session

2005-05-04 Thread Fabian Pena
Thank Bob. Yes, I think an invalidate and then a request.getSession(true) doesn't work. Do you know if there are some other options, or a tomcat setting to do this? The only solution that i found at this moment, was set a diferent domain name for http and https. As you see, me english is not

Re: How do I redirect all tomcat ports to use SSL?

2005-05-04 Thread Fabian Pena
In a web application, you can edit your web.xml file and add a security-constraint to redirect all application requests to SSL. I Hope this help Fabian Donny R Rota wrote: This weeks puzzler 8^) I want all my Tomcat requests to go through SSL. I setup tomcat, and got port 80 and port 443 (SSL)

Moving from http to https doesnt expire session

2005-05-02 Thread Fabian Pena
hi all I have a simple question, at least I think that. I am developing an applicatin that contains confidential information, and I'm having a simple problem. when a user move from http to https de session doesnt expire, the jsessionid is the same. I want generate a new session and of course

Re: security-constraint in web.xml

2004-08-17 Thread Fabian Pena
Your suggestion work perfectly Thank you very much. Fabian Bill Barker wrote: You simply need to have two security-constraints: One looks like below, and the other has url-pattern/*/url-pattern, and doesn't have an auth-constraint. [EMAIL PROTECTED] wrote in message news:[EMAIL PROTECTED] I need