how to use different session id from http to https

2008-02-10 Thread Dave
Hi, I am using JBoss 4.0.5GA. Cookie-based session tracking is used. Starting with http, when user clicks login, redirect to https, but the same session id is used for https. It is not safe. after calling session.invalidate(), the sessoin id in the cookie is used for https.

Problem n using tomcat in vista

2008-02-10 Thread pradeep565
About tomcat not working in vista for my own examples i am unable to use tomcat in vista,it is running and executing the default examples,but it is not executing the my created examples it is giving the error that the file is not found.Please give me a solution for this problem tomcat version

Re: managing user uploads best practices

2008-02-10 Thread brien colwell
On the topic of DB versus filesystem for media, I prefer storing media in a filesystem and meta data in a DB. The advantages of storing large binary files outside of the DB are * Reduce contention in the DB -- it's doing so much * You have more control with a filesystem where your data goes --

Re: IP Based Virtual Hosting

2008-02-10 Thread Hassan Schroeder
On Feb 10, 2008 11:05 AM, Alaska Winter [EMAIL PROTECTED] wrote: Is there a way to enable IP based hosting in tomcat directly Minimally, you just need a Connector element for each IP, and the proper DNS assignments. HTH, -- Hassan Schroeder [EMAIL PROTECTED]

IP Based Virtual Hosting

2008-02-10 Thread Alaska Winter
Hi, I use Tomcat 6.0.10 as a stand-alone web application server (not sitting behind Apache httpd). I host several domains on a single physical host using name-based virtual hosting set up in server.xml. I need to enable ssl for one of the domains. I understand I can no longer use name-based

SSL / Cheapest CA's

2008-02-10 Thread Alaska Winter
What's the cheapest Certificate Authority that's compatible with Tomcat and most browsers? Thanks

Re: Tomcat - Problem Loading page.

2008-02-10 Thread David Smith
Provide details please. This question is completely unanswerable as is. Tomcat version? Java version? OS? Actual error on the page? Full error stack trace in the logs? Also take a look at How To Ask Questions The Smart Way - http://www.catb.org/~esr/faqs/smart-questions.html --David

Tomcat - Problem Loading page.

2008-02-10 Thread Jake Hall
Hello, I recently installed tomcat and java. I ran the tomcat server using - /usr/local/tomcat/bin/startup.sh however when I go to the ip:8080 it says page cannot be displayed. How can I solve this problem? Thanks, Jake.

Re: SSL / Cheapest CA's

2008-02-10 Thread Hassan Schroeder
On Feb 10, 2008 11:49 AM, Alaska Winter [EMAIL PROTECTED] wrote: What's the cheapest Certificate Authority that's compatible with Tomcat and most browsers? Your self-signed cert :-) Unless by compatible you mean won't provoke alarming pop-ups, in which case... I've used Thawte and Digicert;

Re: Tomcat SSL, Windows 2003 and Windows-My Provider

2008-02-10 Thread Luis Villa
Hello, Windows-MY is a java 6 provider that wraps the MSCAPI to access certificates in the keystore of Windows (the store used when you go to OptionsContentCertificates in Internet Explorer). This store has the advantage that allows you to use certificates based on your user but, at the same

Re: how to use different session id from http to https

2008-02-10 Thread Bill Barker
Dave [EMAIL PROTECTED] wrote in message news:[EMAIL PROTECTED] Hi, I am using JBoss 4.0.5GA. Cookie-based session tracking is used. Starting with http, when user clicks login, redirect to https, but the same session id is used for https. It is not safe. after calling

Re: catalina.out is not reloading

2008-02-10 Thread persistence k
Yes, Mr.David. I want each time tomcat's redirects its standard output to catalina.out file, this file should reflect that change and during tomcat start up all the content in the file should be deleted, instead of appending it to previous messages. Right now I'm closing and reopening the file to

Re: catalina.out is not reloading

2008-02-10 Thread David Smith
Then you should modify the startup script to handle renaming or deleting the old file before starting tomcat. Catalina.out itself is just the redirected standard output from tomcat and tomcat has no control over what the OS does with what it spews out. As a better alternative, configure your

Re: how to use different session id from http to https

2008-02-10 Thread Dave
session.invalidate(); session = request.getSession(true); The new session will have the same session id. Bill Barker [EMAIL PROTECTED] wrote: Dave wrote in message news:[EMAIL PROTECTED] Hi, I am using JBoss 4.0.5GA. Cookie-based session tracking is used. Starting with http, when user