Re: SSL and non SSL configuration on tomcat 6.0.26, confused

2010-07-01 Thread John-Paul Ranaudo
No we are not. On 7/1/10, Pid p...@pidster.com wrote: On 01/07/2010 03:42, John-Paul Ranaudo wrote: I have now realized the root of the problem. The cause of the problem is that the load balancer will sometimes proxy an HTTPS request as an HTTP request so when we send back a redirect we send

Re: SSL and non SSL configuration on tomcat 6.0.26, confused

2010-07-01 Thread John-Paul Ranaudo
/07/2010 08:49, John-Paul Ranaudo wrote: No we are not. If the SSL-only resources match a specific path, you can add a security-constraint which doesn't have user roles, but does have a transport-guarantee set to 'CONFIDENTIAL'. The container will automatically upgrade a matching request

Re: SSL and non SSL configuration on tomcat 6.0.26, confused

2010-07-01 Thread John-Paul Ranaudo
to HTTPS by redirecting it to the port configured in 'redirectPort' on the HTTP connector. p On 7/1/10, Pid p...@pidster.com mailto:p...@pidster.com wrote: On 01/07/2010 03:42, John-Paul Ranaudo wrote: I have now realized the root of the problem

Re: SSL and non SSL configuration on tomcat 6.0.26, confused

2010-07-01 Thread John-Paul Ranaudo
the incoming URL to tell which domain its coming from and handle appropriately. Thanks. On Thu, Jul 1, 2010 at 11:31 AM, Pid p...@pidster.com wrote: On 01/07/2010 16:01, John-Paul Ranaudo wrote: I am confused no doubt. What you say here is correct: /In your description of the issue so far

Re: SSL and non SSL configuration on tomcat 6.0.26, confused

2010-07-01 Thread John-Paul Ranaudo
I wish I could provide more information. At least I have narrowed down the problem. I am having a meeting with the architects of both frameworks today so perhaps I'll get some details. Thanks. On Thu, Jul 1, 2010 at 2:54 PM, Pid p...@pidster.com wrote: On 01/07/2010 19:38, John-Paul Ranaudo

Re: SSL and non SSL configuration on tomcat 6.0.26, confused

2010-06-30 Thread John-Paul Ranaudo
and Regards, John-Paul Ranaudo Application Architect On Fri, Jun 25, 2010 at 2:22 PM, Christopher Schultz ch...@christopherschultz.net wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 John-Paul, On 6/25/2010 1:40 PM, John-Paul Ranaudo wrote: Ok, so I am assuming I do not have to setup

Re: SSL and non SSL configuration on tomcat 6.0.26, confused

2010-06-26 Thread John-Paul Ranaudo
Schultz ch...@christopherschultz.net wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 John-Paul, On 6/25/2010 1:40 PM, John-Paul Ranaudo wrote: Ok, so I am assuming I do not have to setup SSL (certificates etc) since my load balancer is decoding the connection. So even if the load

SSL and non SSL configuration on tomcat 6.0.26, confused

2010-06-25 Thread John-Paul Ranaudo
Our environment: Unix Solaris 5.9 Tomcat 6.0.26 JVM 1.6.20 Our application runs in two frameworks. One uses https one does not. I am trying to configure the tomcat connectors to work but when I get it working in one framework it does not work in the other. *I have been told we do not need to

Re: SSL and non SSL configuration on tomcat 6.0.26, confused

2010-06-25 Thread John-Paul Ranaudo
to the port 80 internally and scheme to 'https'. This actually had the effect of making one framework (the one with https) work but broke the other. Regards, John On Fri, Jun 25, 2010 at 1:18 PM, Pid p...@pidster.com wrote: On 25/06/2010 17:56, John-Paul Ranaudo wrote: Our environment: Unix