tomcat 5.5.4 and SSL on selected pages

From: Maik Wiege (mswiegeNO*SPAM_at_gmx.de)
Date: 01/30/05 

Date: Sun, 30 Jan 2005 22:41:33 +0100

Hello!
I have some questions about SSL in tomcat. My set up of the ssl port works
fine, but I have some problems about setting it up for selected pages...
Here is what I wrote in my web.xml:
      <security-constraint>
        <web-resource-collection>
            <web-resource-name>Security page
            </web-resource-name>
            <url-pattern>/test.jsp</url-pattern>
            <http-method>GET</http-method>
            <http-method>POST</http-method>
        </web-resource-collection>
        <user-data-constraint>
            <transport-guarantee>CONFIDENTIAL</transport-guarantee>
        </user-data-constraint>
    </security-constraint>
Opening the test.jsp in my browser changes the connection to ssl mode, what
is fine, but following a link to any other page from there, lets the user
stay in ssl mode what I doesn't want.
I tried, to add this in the web.xml too, but it made no change...
  <security-constraint>
        <web-resource-collection>
            <web-resource-name>Insecurity page
            </web-resource-name>
            <url-pattern>/*</url-pattern>
            <http-method>GET</http-method>
            <http-method>POST</http-method>
        </web-resource-collection>
        <user-data-constraint>
            <transport-guarantee>NONE</transport-guarantee>
        </user-data-constraint>
    </security-constraint>

Anybody an idea, how this is correctly implemented?
Thanks!
  Maik

Relevant Pages

  • RE: Setting up a new OWA with SSL Support
    ... Give me the screen shot of the greyed out option for the ssl certificate. ... port is 80 and SSL port is grey out. ... On the Access tab, click Authentication, there are the following ... Microsoft CSS Online Newsgroup Support ...
    (microsoft.public.windows.server.sbs)
  • Re: Exchange 2003 SP2 : OWA SSL problem
    ... I explained that I had success in setting up the server to ... site from the Exchange admin pages, I need to re-set the ssl port in IIS. ... That's why I created two more web site. ...
    (microsoft.public.exchange.admin)
  • Re: SSL Problem! weird - URGENT !
    ... the error message is "The Page Cannot be displayed, ... >On the IIS website in question did you configure the SSL ... >> have an ISA2000 server with SSL port ...
    (microsoft.public.inetserver.iis.security)
  • Re: Problem establishing SSL connection in code-behind
    ... On Jan 2, 11:15 pm, "Joe Kaplan" ... Especially confusing is that at once place, the log says that I am not ... I thought that maybe port 4443 (the SSL port I use) is blocked by the ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Re: Host Headers Are Not Supported When You Use SSL
    ... You can run multiple websites on an IIS box, each secured with SSL, provided ... that the SSL port for each website is different. ...
    (microsoft.public.inetserver.iis.security)