You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@tomcat.apache.org by ngolehung84 <ng...@yahoo.com> on 2006/06/14 19:06:12 UTC

Configure SSL

Hi, 
I have configured my web site to use SSL successfully. But, the client can
access my website from 2 URL with 2 protocol Http and Https
For example: The client can access my website with:
http://localhost:8080/mysite/
https://localhost:8443/mysite/
 
Now, I want to configure Tomcat to allow the client access my website from
one URL only:
https://localhost:8443/mysite/
And if client uses this URL: http://localhost:8080/mysite/  the exception
will be returned to the client.

How can I do that?
Thanks in advance,
Hung.

--
View this message in context: http://www.nabble.com/Configure--SSL-t1787438.html#a4868972
Sent from the Tomcat - User forum at Nabble.com.


---------------------------------------------------------------------
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org

Re: Configure SSL

Posted by Mark Thomas <ma...@apache.org>.
ngolehung84 wrote:
> But if I have 2 site:
> http://localhost/site1/
> http://localhost/site2/
> and I want only site1 use SSL, site2 does not!
> So what must I do?
> Thanks in advance!

Put the security constraint in the applications web.xml file rather
than the global one.

Mark


---------------------------------------------------------------------
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org

RE: Configure SSL

Posted by ngolehung84 <ng...@yahoo.com>.
But if I have 2 site:
http://localhost/site1/
http://localhost/site2/
and I want only site1 use SSL, site2 does not!
So what must I do?
Thanks in advance!
Hung.
--
View this message in context: http://www.nabble.com/Configure--SSL-t1787438.html#a4876499
Sent from the Tomcat - User forum at Nabble.com.


---------------------------------------------------------------------
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org

RE: Configure SSL

Posted by "Dongyi Liu (List)" <li...@googlemail.com>.
Hi Hung,

Please modify web.xml in $catalina_home/conf/

Please add the following section just before the ending </web-app> tag:

<security-constraint>
	<web-resource-collection>
		<web-resource-name>Automatic SSL
Forwarding</web-resource-name>
		<url-pattern>/*</url-pattern>
	</web-resource-collection>
	<user-data-constraint>
		<transport-guarantee>
			CONFIDENTIAL
		</transport-guarantee>
	</user-data-constraint>
</security-constraint>

This will divert all the request to https one.

dongyi

-----Original Message-----
From: ngolehung84 [mailto:ngolehung84@yahoo.com] 
Sent: 14 June 2006 18:06
To: users@tomcat.apache.org
Subject: Configure SSL


Hi, 
I have configured my web site to use SSL successfully. But, the client can
access my website from 2 URL with 2 protocol Http and Https
For example: The client can access my website with:
http://localhost:8080/mysite/
https://localhost:8443/mysite/
 
Now, I want to configure Tomcat to allow the client access my website from
one URL only:
https://localhost:8443/mysite/
And if client uses this URL: http://localhost:8080/mysite/  the exception
will be returned to the client.

How can I do that?
Thanks in advance,
Hung.

--
View this message in context:
http://www.nabble.com/Configure--SSL-t1787438.html#a4868972
Sent from the Tomcat - User forum at Nabble.com.


---------------------------------------------------------------------
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org


---------------------------------------------------------------------
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org