Does the web-resource-name attribute need to be the name of my
application, or can it be blank?  Also, the url pattern should
actually be the url of the web app correct, not /*, correct - the /*
was just a placeholder?


On Fri, 19 Nov 2004 10:17:45 -0600, Jonathan Eric Miller
<[EMAIL PROTECTED]> wrote:
> Also, you'll need something like the following in your web.xml.
> 
> <security-constraint>
> <web-resource-collection>
> <web-resource-name></web-resource-name>
> <url-pattern>/*</url-pattern>
> </web-resource-collection>
> <user-data-constraint>
> <transport-guarantee>CONFIDENTIAL</transport-guarantee>
> </user-data-constraint>
> </security-constraint>
> 
> Jon
> 
> 
> 
> ----- Original Message -----
> From: "Shapira, Yoav" <[EMAIL PROTECTED]>
> To: "Tomcat Users List" <[EMAIL PROTECTED]>; "Xeth Waxman"
> <[EMAIL PROTECTED]>
> Sent: Friday, November 19, 2004 10:05 AM
> Subject: RE: Redirecting not https to https
> 
> >
> > Hi,
> > That's the redirectPort connector attribute.  If an https request comes
> > into a non-secure connector, and that connector has a redirectPort, the
> > request will be redirected.
> >
> > Yoav Shapira http://www.yoavshapira.com
> >
> >
> >>-----Original Message-----
> >>From: Xeth Waxman [mailto:[EMAIL PROTECTED]
> >>Sent: Friday, November 19, 2004 10:56 AM
> >>To: [EMAIL PROTECTED]
> >>Subject: Redirecting not https to https
> >>
> >>Greetings all.  I am moving one application I have from standard http
> >>over to https.  I found this article
> >>http://jakarta.apache.org/tomcat/tomcat-5.0-doc/ssl-howto.html
> >>which I think will help me get it configured.  My question is, is
> >>there a tag I need to add in the web.xml descriptor file to make sure
> >>that http requests get redirectedf automatically into a https request?
> >>
> >>Any assistance is greatly appreciated.
> >>
> >>--
> >>Xeth Waxman
> >>[EMAIL PROTECTED]
> >>
> >>---------------------------------------------------------------------
> >>To unsubscribe, e-mail: [EMAIL PROTECTED]
> >>For additional commands, e-mail: [EMAIL PROTECTED]
> >
> >
> >
> >
> > This e-mail, including any attachments, is a confidential business
> > communication, and may contain information that is confidential,
> > proprietary and/or privileged.  This e-mail is intended only for the
> > individual(s) to whom it is addressed, and may not be saved, copied,
> > printed, disclosed or used by anyone else.  If you are not the(an)
> > intended recipient, please immediately delete this e-mail from your
> > computer system and notify the sender.  Thank you.
> >
> >
> > ---------------------------------------------------------------------
> > To unsubscribe, e-mail: [EMAIL PROTECTED]
> > For additional commands, e-mail: [EMAIL PROTECTED]
> >
> >
> 
> 


-- 
Xeth Waxman
[EMAIL PROTECTED]

---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to