SSL Doesn't Stay SSL

2004-03-10 Thread John Thompson 
I'm having a problem where I want users to connect to my servlet with SSL
but I can't get it to maintain an SSL connection.  The first page of the
servlet is encrypted but when I navigate to the second and other pages, the
browser no longer shows the lock icon.  The URL is still the https:// URL.

 

I am using the AJP connector through Apache 2 and the SSL stuff all works
with flat content on the Apache server.  I'm running 4.1.27 Tomcat.

 

I don't know what other info might be helpful.

 

Thanks in advance.

Re: SSL Doesn't Stay SSL

2004-03-10 Thread Alex 

all the images and all content must be provided from the https link or
else you'll loose the lock.

On Wed, 10 Mar 2004, John Thompson wrote:

 Date: Wed, 10 Mar 2004 08:58:34 -0600
 From: John Thompson [EMAIL PROTECTED]
 Reply-To: Tomcat Users List [EMAIL PROTECTED],
  [EMAIL PROTECTED]
 To: [EMAIL PROTECTED]
 Subject: SSL Doesn't Stay SSL

 I'm having a problem where I want users to connect to my servlet with SSL
 but I can't get it to maintain an SSL connection.  The first page of the
 servlet is encrypted but when I navigate to the second and other pages, the
 browser no longer shows the lock icon.  The URL is still the https:// URL.



 I am using the AJP connector through Apache 2 and the SSL stuff all works
 with flat content on the Apache server.  I'm running 4.1.27 Tomcat.



 I don't know what other info might be helpful.


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

RE: SSL Doesn't Stay SSL

2004-03-10 Thread AMELIN Franck 
Try to force the use of https on the server :


RewriteEngine on
RewriteLog logs/rewrite.log
RewriteCond %{SERVER_PORT} ^80$
RewriteRule ^/(.*)$ https://%{SERVER_NAME}/$1 [R,L]

In you're file httpd2.conf.



 -Message d'origine-
De :John Thompson [mailto:[EMAIL PROTECTED]
Envoyé :mercredi 10 mars 2004 15:59
À : [EMAIL PROTECTED]
Objet : SSL Doesn't Stay SSL

I'm having a problem where I want users to connect to my servlet with SSL
but I can't get it to maintain an SSL connection.  The first page of the
servlet is encrypted but when I navigate to the second and other pages, the
browser no longer shows the lock icon.  The URL is still the https:// URL.



I am using the AJP connector through Apache 2 and the SSL stuff all works
with flat content on the Apache server.  I'm running 4.1.27 Tomcat.



I don't know what other info might be helpful.



Thanks in advance.



-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

RE: SSL Doesn't Stay SSL

2004-03-10 Thread John Thompson 
I put these settings in the Virtual Host section as follows: 

VirtualHost *:443
  ServerName app.domain.com
  JkMount /app/* ajp13
  JkExtractSSL On
  JkHTTPSIndicator HTTPS
  JkSESSIONIndicator SSL_SESSION_ID
  JkCIPHERIndicator SSL_CIPHER
  JkCERTSIndicator SSL_CLIENT_CERT
  DocumentRoot /usr/local/sbin/tomcat/webapps/app
  SSLEngine On
  SSLCertificateFile conf/ssl.crt/app.domain.com.crt
  SSLCertificateKeyFile conf/ssl.key/app.domain.com.key
RewriteEngine On
RewriteLog logs/rewrite.log
RewriteCond %{SERVER_PORT} ^80$
RewriteRule ^/(.*)$ https://app.domain.com/$1 [R,L]
/VirtualHost

I still have the same problem.  I don't want to force all virtual hosts to
use SSL, just this one servlet called app.


-Original Message-
From: AMELIN Franck [mailto:[EMAIL PROTECTED] 
Sent: Wednesday, March 10, 2004 9:29 AM
To: 'Tomcat Users List'; [EMAIL PROTECTED]
Subject: RE: SSL Doesn't Stay SSL

Try to force the use of https on the server :


RewriteEngine on
RewriteLog logs/rewrite.log
RewriteCond %{SERVER_PORT} ^80$
RewriteRule ^/(.*)$ https://%{SERVER_NAME}/$1 [R,L]

In you're file httpd2.conf.



 -Message d'origine-
De :John Thompson [mailto:[EMAIL PROTECTED]
Envoyé :mercredi 10 mars 2004 15:59
À : [EMAIL PROTECTED]
Objet : SSL Doesn't Stay SSL

I'm having a problem where I want users to connect to my servlet with SSL
but I can't get it to maintain an SSL connection.  The first page of the
servlet is encrypted but when I navigate to the second and other pages, the
browser no longer shows the lock icon.  The URL is still the https:// URL.



I am using the AJP connector through Apache 2 and the SSL stuff all works
with flat content on the Apache server.  I'm running 4.1.27 Tomcat.



I don't know what other info might be helpful.



Thanks in advance.



-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

RE: SSL Doesn't Stay SSL

2004-03-10 Thread AMELIN Franck 
And something like this ?

RewriteCond %{REQUEST_URI} ^/servlet/app(.*)
RewriteRule ^/(.*)$ https://app.domain.com/$1 [R,L]

 -Message d'origine-
De :John Thompson [mailto:[EMAIL PROTECTED]
Envoyé :mercredi 10 mars 2004 17:02
À : 'Tomcat Users List'
Objet : RE: SSL Doesn't Stay SSL

I put these settings in the Virtual Host section as follows:

VirtualHost *:443
  ServerName app.domain.com
  JkMount /app/* ajp13
  JkExtractSSL On
  JkHTTPSIndicator HTTPS
  JkSESSIONIndicator SSL_SESSION_ID
  JkCIPHERIndicator SSL_CIPHER
  JkCERTSIndicator SSL_CLIENT_CERT
  DocumentRoot /usr/local/sbin/tomcat/webapps/app
  SSLEngine On
  SSLCertificateFile conf/ssl.crt/app.domain.com.crt
  SSLCertificateKeyFile conf/ssl.key/app.domain.com.key
RewriteEngine On
RewriteLog logs/rewrite.log
RewriteCond %{SERVER_PORT} ^80$
RewriteRule ^/(.*)$ https://app.domain.com/$1 [R,L]
/VirtualHost

I still have the same problem.  I don't want to force all virtual hosts to
use SSL, just this one servlet called app.


-Original Message-
From: AMELIN Franck [mailto:[EMAIL PROTECTED]
Sent: Wednesday, March 10, 2004 9:29 AM
To: 'Tomcat Users List'; [EMAIL PROTECTED]
Subject: RE: SSL Doesn't Stay SSL

Try to force the use of https on the server :


RewriteEngine on
RewriteLog logs/rewrite.log
RewriteCond %{SERVER_PORT} ^80$
RewriteRule ^/(.*)$ https://%{SERVER_NAME}/$1 [R,L]

In you're file httpd2.conf.



 -Message d'origine-
De :John Thompson [mailto:[EMAIL PROTECTED]
Envoyé :mercredi 10 mars 2004 15:59
À : [EMAIL PROTECTED]
Objet : SSL Doesn't Stay SSL

I'm having a problem where I want users to connect to my servlet with SSL
but I can't get it to maintain an SSL connection.  The first page of the
servlet is encrypted but when I navigate to the second and other pages, the
browser no longer shows the lock icon.  The URL is still the https:// URL.



I am using the AJP connector through Apache 2 and the SSL stuff all works
with flat content on the Apache server.  I'm running 4.1.27 Tomcat.



I don't know what other info might be helpful.



Thanks in advance.



-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

RE: SSL Doesn't Stay SSL

2004-03-10 Thread John Thompson 
This has changed some things.

I have replaced the SERVER_PORT condition and rule with the URI condition
and rule and left it inside the VirtualHost directive.

Now the first page isn't displayed at all.  Looking at the Apache ssl.log,
SSL seems to be working fine (connection to child 7 established... Seeding
PRNG with 136 bytes of entropy).

The Apache access log, however, shows a continuous access of the same
initial page (GET /app/index.jsp HTTP/1.0).  This happens a couple times a
second.

From the browser, I enter https://app.domain.com.  This finds the index.html
which uses the REFRESH META tag to redirects to the url /app/index.jsp

Thanks for your patience and attention.

-Original Message-
From: AMELIN Franck [mailto:[EMAIL PROTECTED] 
Sent: Wednesday, March 10, 2004 10:22 AM
To: 'Tomcat Users List'; [EMAIL PROTECTED]
Subject: RE: SSL Doesn't Stay SSL

And something like this ?

RewriteCond %{REQUEST_URI} ^/servlet/app(.*)
RewriteRule ^/(.*)$ https://app.domain.com/$1 [R,L]

 -Message d'origine-
De :John Thompson [mailto:[EMAIL PROTECTED]
Envoyé :mercredi 10 mars 2004 17:02
À : 'Tomcat Users List'
Objet : RE: SSL Doesn't Stay SSL

I put these settings in the Virtual Host section as follows:

VirtualHost *:443
  ServerName app.domain.com
  JkMount /app/* ajp13
  JkExtractSSL On
  JkHTTPSIndicator HTTPS
  JkSESSIONIndicator SSL_SESSION_ID
  JkCIPHERIndicator SSL_CIPHER
  JkCERTSIndicator SSL_CLIENT_CERT
  DocumentRoot /usr/local/sbin/tomcat/webapps/app
  SSLEngine On
  SSLCertificateFile conf/ssl.crt/app.domain.com.crt
  SSLCertificateKeyFile conf/ssl.key/app.domain.com.key
RewriteEngine On
RewriteLog logs/rewrite.log
RewriteCond %{SERVER_PORT} ^80$
RewriteRule ^/(.*)$ https://app.domain.com/$1 [R,L]
/VirtualHost

I still have the same problem.  I don't want to force all virtual hosts to
use SSL, just this one servlet called app.


-Original Message-
From: AMELIN Franck [mailto:[EMAIL PROTECTED]
Sent: Wednesday, March 10, 2004 9:29 AM
To: 'Tomcat Users List'; [EMAIL PROTECTED]
Subject: RE: SSL Doesn't Stay SSL

Try to force the use of https on the server :


RewriteEngine on
RewriteLog logs/rewrite.log
RewriteCond %{SERVER_PORT} ^80$
RewriteRule ^/(.*)$ https://%{SERVER_NAME}/$1 [R,L]

In you're file httpd2.conf.



 -Message d'origine-
De :John Thompson [mailto:[EMAIL PROTECTED]
Envoyé :mercredi 10 mars 2004 15:59
À : [EMAIL PROTECTED]
Objet : SSL Doesn't Stay SSL

I'm having a problem where I want users to connect to my servlet with SSL
but I can't get it to maintain an SSL connection.  The first page of the
servlet is encrypted but when I navigate to the second and other pages, the
browser no longer shows the lock icon.  The URL is still the https:// URL.



I am using the AJP connector through Apache 2 and the SSL stuff all works
with flat content on the Apache server.  I'm running 4.1.27 Tomcat.



I don't know what other info might be helpful.



Thanks in advance.



-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]