Hi All,

I have an SSL-secured form served by IIS whose POST action invokes a java
servlet as follows using JRun.

<form action="https://cuisone.ca.boeing.com/corba_ssl/LogonServlet.jrun"
   method=post name=logonform>

However, when the action is invoked I get a "Security Information" dialog
in my browser that says that, although the page is secure, the data being
transmitted is not secure.

If I use a GET method instead of POST, everything works fine except that
the data (which includes a password) shows up in the URL field of the
browser (something that I would rather avoid).

Now, I am pretty sure that I am getting this message because the web server
(IIS) doesn't think that the servlet specified in the action is secure.
The directory corba_ssl is secured.  What am I doing wrong?

I will be indebted to anyone who can help with this.

Kevin Whelan
Boeing Commercial Airplanes

___________________________________________________________________________
To unsubscribe, send email to [EMAIL PROTECTED] and include in the body
of the message "signoff SERVLET-INTEREST".

Archives: http://archives.java.sun.com/archives/servlet-interest.html
Resources: http://java.sun.com/products/servlet/external-resources.html
LISTSERV Help: http://www.lsoft.com/manuals/user/user.html

Reply via email to