Hi all,
Searched the archives, but couldn't quite get a good simple explanation
of how to set up sslext.
Here's my progress so far:
1) Hook up ssl with your keystore etc on your container
2) Download sslext from sourceforge.
3) Install the sslext.jar in my WEB-INF/lib folder
4) Install the taglibrary in WEB-INF/
5) Tell the web.xml file about the tld, ie
<taglib>
<taglib-uri>/WEB-INF/sslext.tld</taglib-uri>
<taglib-location>/WEB-INF/sslext.tld</taglib-location>
</taglib>
6) In my jsps import the taglibrary, eg:
<%@ taglib uri="/WEB-INF/sslext.tld" prefix="sslext" %>
7) Use the taglibrary tags when posting - eg:
<sslext:form action="/whatever.do" ...
...
</sslext:form>
9) Add sslext as a plugin to the struts-config.xml file
<plug-in className="org.apache.struts.action.SecurePlugIn">
<set-property property="httpPort" value="8080"/>
<set-property property="httpsPort" value="8443"/>
<set-property property="enable" value="true"/>
</plug-in>
9) In the struts-config.xml file, for the "whatever" action add the
property "secure", eg:
<action
path="/whatever"
type="com.implementingclass.WhateverAction"
name="whateverForm"
scope="request"
unknown="false"
validate="false"
>
<set-property property="secure" value="true"/>
<forward
name="success"
path="/whatever.jsp"
redirect="false"
/>
</action>
Now, I've done all these, but I know there's something missing because
it's not quite working.
I've read a few posts and see these possible things I might have to do
aswell:
a) Change the action-mappings in the struts-config.xml file
<action-mappings type="org.apache.struts.config.SecureActionConfig">
b) Change the web.xml file as follows:
<servlet-name>action</servlet-name>
<servlet-class>org.apache.struts.action.ActionServlet</servlet-class>
<!-- Struts Config -->
<init-param>
<param-name>config</param-name>
<param-value>/WEB-INF/struts-config.xml</param-value>
</init-param>
<init-param>
<param-name>mapping</param-name>
<param-value>org.apache.struts.action.SecureActionMapping</param-value>
</init-param>
could someone tell me if either of these steps are necessary, or what
else is necessary?
Thanks very much,
Brian
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
