Also, you'll need something like the following in your web.xml.

<security-constraint>
<web-resource-collection>
<web-resource-name></web-resource-name>
<url-pattern>/*</url-pattern>
</web-resource-collection>
<user-data-constraint>
<transport-guarantee>CONFIDENTIAL</transport-guarantee>
</user-data-constraint>
</security-constraint>

Jon

----- Original Message ----- From: "Shapira, Yoav" <[EMAIL PROTECTED]>
To: "Tomcat Users List" <[EMAIL PROTECTED]>; "Xeth Waxman" <[EMAIL PROTECTED]>
Sent: Friday, November 19, 2004 10:05 AM
Subject: RE: Redirecting not https to https




Hi, That's the redirectPort connector attribute. If an https request comes into a non-secure connector, and that connector has a redirectPort, the request will be redirected.

Yoav Shapira http://www.yoavshapira.com


-----Original Message-----
From: Xeth Waxman [mailto:[EMAIL PROTECTED]
Sent: Friday, November 19, 2004 10:56 AM
To: [EMAIL PROTECTED]
Subject: Redirecting not https to https

Greetings all.  I am moving one application I have from standard http
over to https.  I found this article
http://jakarta.apache.org/tomcat/tomcat-5.0-doc/ssl-howto.html
which I think will help me get it configured.  My question is, is
there a tag I need to add in the web.xml descriptor file to make sure
that http requests get redirectedf automatically into a https request?

Any assistance is greatly appreciated.

--
Xeth Waxman
[EMAIL PROTECTED]

---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]




This e-mail, including any attachments, is a confidential business communication, and may contain information that is confidential, proprietary and/or privileged. This e-mail is intended only for the individual(s) to whom it is addressed, and may not be saved, copied, printed, disclosed or used by anyone else. If you are not the(an) intended recipient, please immediately delete this e-mail from your computer system and notify the sender. Thank you.


--------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]




---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Reply via email to