Restrict servlets to SSL under Apache.

[Jill Stephenson <ji...@dstc.qut.edu.au>]

I am running Apache/mod_ssl/open_ssl with Tomcat 3.1.

I have a number of servlets in the same context and 
I would like to be able to require only some of the
servlets to be only available when using SSL.

I have been able to restrict the entire context to
requiring SSL using the following Apache directive
<Location /myContext>
  SSLRequireSSL
</Location>
however what I really what to do is something like
<Location /myContext/servlet/secureOne>
  SSLRequireSSL
</Location>

Unfortunately, this does not work as I think that 
it must be getting passed through to Tomcat before 
the location directive is evaluated and enforced.

Has anyone done anything like this, and if so how?

If there's anything in Tomcat 3.2 that can help it
is not an option at present until there is a non
beta release available ...

Thanks.

----
Jill