You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@tomcat.apache.org by bu...@apache.org on 2003/10/13 12:56:38 UTC

DO NOT REPLY [Bug 23766] New: - cannot configure SSL for form-based authentication

DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG 
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
<http://nagoya.apache.org/bugzilla/show_bug.cgi?id=23766>.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND 
INSERTED IN THE BUG DATABASE.

http://nagoya.apache.org/bugzilla/show_bug.cgi?id=23766

cannot configure SSL for form-based authentication

           Summary: cannot configure SSL for form-based authentication
           Product: Tomcat 5
           Version: 5.0.12
          Platform: All
        OS/Version: All
            Status: NEW
          Severity: Major
          Priority: Other
         Component: Webapps:Manager
        AssignedTo: tomcat-dev@jakarta.apache.org
        ReportedBy: adam.hardy@cyberspaceroad.com


I have tried putting the following in
$CATALINA_HOME/server/webapps/manager/WEB-INF/web.xml but the SSL config is ignored:

  <security-constraint>
    <web-resource-collection>
      <web-resource-name>SSL 4 Login</web-resource-name>
      <url-pattern>/ssllogin.html</url-pattern>
      <url-pattern>/sslerror.html</url-pattern>
    </web-resource-collection>
    <user-data-constraint>
      <description>SSL required</description>
      <transport-guarantee>CONFIDENTIAL</transport-guarantee>
    </user-data-constraint>
  </security-constraint>

  <login-config>
    <auth-method>FORM</auth-method>
    <realm-name>BlackSailRealm</realm-name>
    <form-login-config>
      <form-login-page>/ssllogin.html</form-login-page>
      <form-error-page>/sslerror.html</form-error-page>
    </form-login-config>
  </login-config>

I have the login & error pages in $CATALINA_HOME/server/webapps/manager/

Basically it always stays in non-SSL protocol.

---------------------------------------------------------------------
To unsubscribe, e-mail: tomcat-dev-unsubscribe@jakarta.apache.org
For additional commands, e-mail: tomcat-dev-help@jakarta.apache.org