Forcing SSL to handle requests

Hi, I'm running a standalone Tomcat webserver 4.0.6 and am trying to force a resource on my web server to only serve a particular URL through SSL, so I've inserted the following lines in the web.xml file: security-constraint web-resource-collection web-resource-nameProtected

Forcing strong authentication with Tomcat 4.0.6 standalone web server

Hi, I'm trying to configure SSL on a standalone Tomcat webserver 4.0.6. and I can't quite work out how and where to configure the server to allow the use of strong authentication only (1024) during cipher suite negotiation. Does someone what lines to add to server.xml file or otherwise? Thanks!