Nothing to add to the below except to mention where we encountered related
troubles in this area (if of any use). Assuming you are using the servlet on
the server end be aware that anything you do that relies on caching (or
absence of) anywhere along the route between you and the client may have
very different results over Https vs Http. This took us ages to figure out
(and given that every firewall and proxy server seems to do different things
we will never get it perfect) but a great help was

http://www.web-caching.com/

Steve F.




rgds

Steve Flynn

JF Technology (UK) Limited

+44 20 7667 6903 (Office)
+44 468 003 882 (Mobile)


-----Original Message-----
From: A mailing list for discussion about Sun Microsystem's Java Servlet
API Technology. [mailto:[EMAIL PROTECTED]]On Behalf Of Milt
Epstein
Sent: 03 August 2000 15:09
To: [EMAIL PROTECTED]
Subject: Re: HTTPS in servlet


On Thu, 3 Aug 2000, Jackson Ching wrote:

> Hi,
>
>         How do i use https in servlet? is there anything i have to
> modify in my servlet so that i can support https? I'm doing a web
> application.  Thanks

First of all, you need to clarify what you want to do, because there's
two different things you could mean.  Basically it depends on whether
your servlet is sitting on the server end (e.g. behind the web server)
or the client end of the https transaction.

The first of these -- the servlet on the server end -- is quite
straightforward -- so long as you are using a web server that can
handle https transactions.  Basically, the https stuff is transparent
to the servlet, and is handled in the communication between the server
and the client (likely a browser), so the servlet need not do
anything.  Just enable your server to handle https transactions, and
you should be off (there might actually be some relatively minimal
stuff you need to do with regard to how your servlet container is set
up).  How to do that depends on what web server you are using (and is
not really a question for this list).

If the servlet is to be the client end of the https transaction, then
you need some third party https packages to do it -- Sun's JSSE might
work for this, and there are some others.  Check the archives of this
list, because this has been discussed before, a number of times.

Milt Epstein
Research Programmer
Software/Systems Development Group
Computing and Communications Services Office (CCSO)
University of Illinois at Urbana-Champaign (UIUC)
[EMAIL PROTECTED]

___________________________________________________________________________
To unsubscribe, send email to [EMAIL PROTECTED] and include in the body
of the message "signoff SERVLET-INTEREST".

Archives: http://archives.java.sun.com/archives/servlet-interest.html
Resources: http://java.sun.com/products/servlet/external-resources.html
LISTSERV Help: http://www.lsoft.com/manuals/user/user.html

___________________________________________________________________________
To unsubscribe, send email to [EMAIL PROTECTED] and include in the body
of the message "signoff SERVLET-INTEREST".

Archives: http://archives.java.sun.com/archives/servlet-interest.html
Resources: http://java.sun.com/products/servlet/external-resources.html
LISTSERV Help: http://www.lsoft.com/manuals/user/user.html

Reply via email to