You are viewing a plain text version of this content. The canonical link for it is here.
Posted to jetspeed-user@portals.apache.org by lu...@sorma.com on 2003/02/19 09:29:35 UTC
SSL question
Hi all!
I would like to know more on ssl support in jetspeed.
What does it means :
# -------------------------------------------------------------------
#
# S E C U R E S O C K E T S L A Y E R
#
# -------------------------------------------------------------------
# Whether the web server is able to use SSL. Links in Turbine can
# check this property to determine if SSL can be used.
#
# Default: true
# -------------------------------------------------------------------
use.ssl=true
in TurbineResource.properties.
What can i have to do if i want to access portal homepage using http and
user homepage using https?
Thanx to all!
---------------------------------------------------------------------
To unsubscribe, e-mail: jetspeed-user-unsubscribe@jakarta.apache.org
For additional commands, e-mail: jetspeed-user-help@jakarta.apache.org
AW: SSL question
Posted by Joachim Muller <jo...@wemove.com>.
I forgot to mention that
<DefaultContext cookies="false">
</DefaultContext>
should be placed in <host> tag of the server.xml.
att: this will apply to all contexts by default. to do this
for jetspeed only, you have to create a separate context
for jetspeed (it's in the tomcat manual).
joachim
> -----Ursprungliche Nachricht-----
> Von: Joachim Muller [mailto:joachim@wemove.com]
> Gesendet: Mittwoch, 19. Februar 2003 10:18
> An: Jetspeed Users List
> Betreff: AW: SSL question
>
>
>
> I did not do it, but I guess you have to:
>
> 1.) configure tomcat to accept SSL connections
> http://jakarta.apache.org/tomcat/tomcat-4.1-doc/ssl-howto.html
>
>
> 2.) make sure your session ID will always be transported in the URL and not with cookies since session IDs stored in
> cookies will be lost by changing from http to https (change in URL -> cookies refer to the URL).
>
> add:
>
> <DefaultContext cookies="false">
> </DefaultContext>
>
> to your server.xml at TOMCAT_HOME/conf
>
>
> 3.) change the form action URL of the login forms manually from http to https (incl. the right port)
>
>
>
> Hope this helps.
>
>
> Joachim
>
>
>
> > -----Ursprungliche Nachricht-----
> > Von: luca.forni@sorma.com [mailto:luca.forni@sorma.com]
> > Gesendet: Mittwoch, 19. Februar 2003 09:30
> > An: Jetspeed Users List
> > Betreff: SSL question
> >
> >
> > Hi all!
> > I would like to know more on ssl support in jetspeed.
> > What does it means :
> > # -------------------------------------------------------------------
> > #
> > # S E C U R E S O C K E T S L A Y E R
> > #
> > # -------------------------------------------------------------------
> > # Whether the web server is able to use SSL. Links in Turbine can
> > # check this property to determine if SSL can be used.
> > #
> > # Default: true
> > # -------------------------------------------------------------------
> >
> > use.ssl=true
> >
> > in TurbineResource.properties.
> >
> > What can i have to do if i want to access portal homepage using http and
> > user homepage using https?
> >
> > Thanx to all!
> >
> >
> > ---------------------------------------------------------------------
> > To unsubscribe, e-mail: jetspeed-user-unsubscribe@jakarta.apache.org
> > For additional commands, e-mail: jetspeed-user-help@jakarta.apache.org
> >
AW: SSL question
Posted by Joachim Muller <jo...@wemove.com>.
I did not do it, but I guess you have to:
1.) configure tomcat to accept SSL connections
http://jakarta.apache.org/tomcat/tomcat-4.1-doc/ssl-howto.html
2.) make sure your session ID will always be transported in the URL and not with cookies since session IDs stored in cookies will be lost by changing from http to https (change in URL -> cookies refer to the URL).
add:
<DefaultContext cookies="false">
</DefaultContext>
to your server.xml at TOMCAT_HOME/conf
3.) change the form action URL of the login forms manually from http to https (incl. the right port)
Hope this helps.
Joachim
> -----Ursprungliche Nachricht-----
> Von: luca.forni@sorma.com [mailto:luca.forni@sorma.com]
> Gesendet: Mittwoch, 19. Februar 2003 09:30
> An: Jetspeed Users List
> Betreff: SSL question
>
>
> Hi all!
> I would like to know more on ssl support in jetspeed.
> What does it means :
> # -------------------------------------------------------------------
> #
> # S E C U R E S O C K E T S L A Y E R
> #
> # -------------------------------------------------------------------
> # Whether the web server is able to use SSL. Links in Turbine can
> # check this property to determine if SSL can be used.
> #
> # Default: true
> # -------------------------------------------------------------------
>
> use.ssl=true
>
> in TurbineResource.properties.
>
> What can i have to do if i want to access portal homepage using http and
> user homepage using https?
>
> Thanx to all!
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: jetspeed-user-unsubscribe@jakarta.apache.org
> For additional commands, e-mail: jetspeed-user-help@jakarta.apache.org
>