You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@tomcat.apache.org by "Reis, Tom" <re...@cdnet.cod.edu> on 2003/04/08 22:51:05 UTC
Tomcat4 and SSL
What exactly do I need to put in the web.xml to secure a site to
only use SSL. Is it a matter of just setting up a security constraints or is
there more to it.
---------------------------------------------------------------------
To unsubscribe, e-mail: tomcat-user-unsubscribe@jakarta.apache.org
For additional commands, e-mail: tomcat-user-help@jakarta.apache.org
Re: Tomcat4 and SSL
Posted by Lajos <la...@galatea.com>.
Hi Tom -
You need:
<security-constraint>
<web-resource-collection>
<web-resource-name>MyApp</web-resource-name>
<url-pattern>/*</url-pattern>
</web-resource-collection>
<user-data-constraint>
<transport-guarantee>CONFIDENTIAL</transport-guarantee>
</user-data-constraint>
</security-constraint>
in web.xml. Modify <url-pattern> as necessary.
Regards,
Lajos
Reis, Tom wrote:
> What exactly do I need to put in the web.xml to secure a site to
> only use SSL. Is it a matter of just setting up a security constraints or is
> there more to it.
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: tomcat-user-unsubscribe@jakarta.apache.org
> For additional commands, e-mail: tomcat-user-help@jakarta.apache.org
>
>
--
Lajos Moczar
----------------------------------------
Open Source Support, Consulting and Training
----------------------------------------
Cocoon Developer's Handbook
(www.amazon.com/exec/obidos/tg/detail/-/0672322579)
_ _____
/ \ /
/___\ /
/ \ /____
http://www.galatea.com -- powered by AzSSL
---------------------------------------------------------------------
To unsubscribe, e-mail: tomcat-user-unsubscribe@jakarta.apache.org
For additional commands, e-mail: tomcat-user-help@jakarta.apache.org