Hello Bob,

If you are using Tomcat, you may want to look at the settings for the 
"Connector" in Tomcat's server.xml.
(See: 
http://tomcat.apache.org/tomcat-6.0-doc/config/http.html#Common_Attributes )

For each connector, you can configure two attributes: "scheme" and "secure". 
The problem is, if you leave these settings at default, tomcat (and the Servlet 
API) will assume the connection is "http" and unsecured. This means for 
example, that HttpServletRequest.isSecure() will return false.

By setting secure="true" and scheme="https" on the connector you can tell 
tomcat that your connection is secured (in your case by IIS), even though 
tomcat itself is receiving http requests.

I don't know if this will help in your situation...

Regards from Vienna,

Richard



-----Ursprüngliche Nachricht-----
Von: [email protected] [mailto:[email protected]] 
Im Auftrag von Magnolia Forums (on behalf of Bob Whitehouse)
Gesendet: Dienstag, 08. November 2011 15:12
An: Magnolia User List
Betreff: [magnolia-user] Re: Members Area SSL

Never mind about the double protocol link. In a conversation with a co-worker, 
I found out that some experimenting was happening and the link was put in that 
way manually (still not sure why).

So after setting up SSL with IIS is there any configuration that needs to 
happen in Magnolia other than redirecting the unencrypted url? I'm thinking it 
works something like this. If the call comes in as https://.../members.html 
things proceed normally. If it comes in as http://...member.html, Magnolia 
needs to be configured to catch it and redirect to https. If this is correct, 
does the redirect happen from a filter or a Magnolia property or some other 
mechanism?

Thanks, Bob

-- 
Context is everything: 
http://forum.magnolia-cms.com/forum/thread.html?threadId=94576a77-b879-4c68-b5af-b648232647ed


----------------------------------------------------------------
For list details, see http://www.magnolia-cms.com/community/mailing-lists.html
Alternatively, use our forums: http://forum.magnolia-cms.com/
To unsubscribe, E-mail to: <[email protected]>
----------------------------------------------------------------





----------------------------------------------------------------
For list details, see http://www.magnolia-cms.com/community/mailing-lists.html
Alternatively, use our forums: http://forum.magnolia-cms.com/
To unsubscribe, E-mail to: <[email protected]>
----------------------------------------------------------------

Reply via email to