Réf. : Re: SSL

[va...@bull.net]

Just add this in the web.xml of your servlet :

<security-constraint>
        <web-resource-collection>
            <web-resource-name>IHM Authent</web-resource-name>
            <description>Accessible uniquement en SSL</description>
            <url-pattern>/*</url-pattern>
            <http-method>GET</http-method>
            <http-method>POST</http-method>
        </web-resource-collection>
        <user-data-constraint>
            <description>Activation SSL</description>
            <transport-guarantee>CONFIDENTIAL</transport-guarantee>
        </user-data-constraint>
</security-constraint>

Valerie





Andoni <an...@eurokom.ie> sur 19/11/2004 18:31:49

Veuillez répondre à "Tomcat Users List" <to...@jakarta.apache.org>

Pour : Tomcat Users List <to...@jakarta.apache.org>
cc :
Objet :     Re: SSL


Hi,

Do you mean "... into two Services"?

Andoni.

----- Original Message -----
From: "Shapira, Yoav" <Yo...@mpi.com>
Newsgroups: gmane.comp.jakarta.tomcat.user
Sent: Thursday, November 18, 2004 5:53 PM
Subject: RE: SSL



Hi,
Yeah, reorganize your server.xml into two engines, with one connector
and webapp each.  One engine will have the SSL connector and webapp, and
the other engine will have the non-SSL connector and webapp.

Yoav Shapira http://www.yoavshapira.com


>-----Original Message-----
>From: Richard HALLIER [mailto:fred.lamuette@laposte.net]
>Sent: Thursday, November 18, 2004 12:42 PM
>To: Tomcat Users List
>Subject: RE: SSL
>
>Thank you for your reply, but I've omitted to say that I have another
>webapp
>that is non-ssl, so I must have the two connectors (http, https) up.
>Do you have a solution ?
>Really thank you for your help.
>Richard
>
>-----Message d'origine-----
>De : Shapira, Yoav [mailto:Yoav.Shapira@mpi.com]
>Envoye : jeudi 18 novembre 2004 18:09
>A : Tomcat Users List
>Objet : RE: SSL
>
>
>
>Hi,
>Comment out the non-SSL connector element in server.xml.
>
>Yoav Shapira http://www.yoavshapira.com
>
>
>>-----Original Message-----
>>From: Richard HALLIER [mailto:fred.lamuette@laposte.net]
>>Sent: Thursday, November 18, 2004 12:02 PM
>>To: tomcat mailing-list
>>Subject: SSL
>>
>>Hi everybody,
>>Sorry if this question has been already asked, but i didnt find any
>>pointers
>>in the archive.
>>I'm in the following context : Tomcat 5.0.x, Connector SSL active.
>>I'd like to prevent everybody from using my webapp with the HTTP
>protocol,
>>in fact I'd like to restrict access to my webapp only to the https
>>protocol.
>>For the moment and with a standard configuration, I can access my
>webapp
>>from http and https protocol ...
>>Thank you for your help.
>>Richard
>>
>>
>>---------------------------------------------------------------------
>>To unsubscribe, e-mail: tomcat-user-unsubscribe@jakarta.apache.org
>>For additional commands, e-mail: tomcat-user-help@jakarta.apache.org
>
>
>
>
>This e-mail, including any attachments, is a confidential business
>communication, and may contain information that is confidential,
>proprietary
>and/or privileged.  This e-mail is intended only for the individual(s)
to
>whom it is addressed, and may not be saved, copied, printed, disclosed
or
>used by anyone else.  If you are not the(an) intended recipient, please
>immediately delete this e-mail from your computer system and notify the
>sender.  Thank you.
>
>
>---------------------------------------------------------------------
>To unsubscribe, e-mail: tomcat-user-unsubscribe@jakarta.apache.org
>For additional commands, e-mail: tomcat-user-help@jakarta.apache.org
>
>
>
>---------------------------------------------------------------------
>To unsubscribe, e-mail: tomcat-user-unsubscribe@jakarta.apache.org
>For additional commands, e-mail: tomcat-user-help@jakarta.apache.org




This e-mail, including any attachments, is a confidential business
communication, and may contain information that is confidential,
proprietary
and/or privileged.  This e-mail is intended only for the individual(s) to
whom it is addressed, and may not be saved, copied, printed, disclosed or
used by anyone else.  If you are not the(an) intended recipient, please
immediately delete this e-mail from your computer system and notify the
sender.  Thank you.


---------------------------------------------------------------------
To unsubscribe, e-mail: tomcat-user-unsubscribe@jakarta.apache.org
For additional commands, e-mail: tomcat-user-help@jakarta.apache.org









---------------------------------------------------------------------
To unsubscribe, e-mail: tomcat-user-unsubscribe@jakarta.apache.org
For additional commands, e-mail: tomcat-user-help@jakarta.apache.org