You are viewing a plain text version of this content. The canonical link for it is here.
Posted to user@struts.apache.org by Stephane Grenier <st...@landlordmax.com> on 2003/10/07 08:33:10 UTC
ssl question
Hello all.
I can't seem to find the cause of this particular problem. Perhaps someone can point me in the correct direction.
On my local box I'm using sslext with the url being the ip of the box. I have no problems going in and out of ssl. The problem has only risen since I moved to the production box with a domain instead of an ip.
The first issue is that when I do a submit on an ssl form, the return url removes the "www" from the address and thus my ssl certificate says there is an error "The name on the security certificate is invalid or does not match the name of the site".
The second issue, if I leave the <sslext:pageScheme secure="true" /> in the jsp, it seems to process forever (or until I get bored and stop the process).
Any help would be appreciated.
Thank you,
Stephane
Re: ssl question
Posted by Stephane Grenier <st...@landlordmax.com>.
Thank you, I'll try this.
Also would you happen to have any idea why when I change protocol to ssl in
the url it truncates the "www" from my domain name in the url ? I believe
this is related to the problem.
Thank you,
Stephane
----- Original Message -----
From: "Max Cooper" <ma...@maxcooper.com>
To: "Struts Users Mailing List" <st...@jakarta.apache.org>; "Stephane
Grenier" <st...@landlordmax.com>
Sent: Tuesday, October 07, 2003 10:12 AM
Subject: Re: ssl question
> The second problem is likely an "infinite redirection loop":
>
> Browser: I want http://server/page.jsp
> Server: Go to https://server/page.jsp
> Browser: I want https://server/page.jsp
> Server: Go to http://server/page.jsp
> Browser: I want http://server/page.jsp
> Server: Go to https://server/page.jsp
> ... until the browser or server is shut down
>
> You can verify this with a tool like curl or wget, which will allow you to
> make a request and examine the response more closely than a browser
allows.
> You could even do it with telnet.
>
> -Max
>
> ----- Original Message -----
> From: "Stephane Grenier" <st...@landlordmax.com>
> To: "Struts Users Mailing List" <st...@jakarta.apache.org>
> Sent: Monday, October 06, 2003 11:40 PM
> Subject: Re: ssl question
>
>
> > As well, it appears that when <sslext:pageScheme is set to "false", it
> acts
> > as any on the production box. Any suggestions are appreciated.
> >
> > Thanks
> > Stephane
> >
> > ----- Original Message -----
> > From: "Stephane Grenier" <st...@landlordmax.com>
> > To: "Struts Users Mailing List" <st...@jakarta.apache.org>
> > Sent: Tuesday, October 07, 2003 2:33 AM
> > Subject: ssl question
> >
> >
> > Hello all.
> >
> > I can't seem to find the cause of this particular problem. Perhaps
someone
> > can point me in the correct direction.
> >
> > On my local box I'm using sslext with the url being the ip of the box. I
> > have no problems going in and out of ssl. The problem has only risen sin
ce
> I
> > moved to the production box with a domain instead of an ip.
> >
> > The first issue is that when I do a submit on an ssl form, the return
url
> > removes the "www" from the address and thus my ssl certificate says
there
> is
> > an error "The name on the security certificate is invalid or does not
> match
> > the name of the site".
> >
> > The second issue, if I leave the <sslext:pageScheme secure="true" /> in
> the
> > jsp, it seems to process forever (or until I get bored and stop the
> > process).
> >
> > Any help would be appreciated.
> > Thank you,
> > Stephane
> >
> >
> > ---------------------------------------------------------------------
> > To unsubscribe, e-mail: struts-user-unsubscribe@jakarta.apache.org
> > For additional commands, e-mail: struts-user-help@jakarta.apache.org
> >
> >
>
>
>
>
---------------------------------------------------------------------
To unsubscribe, e-mail: struts-user-unsubscribe@jakarta.apache.org
For additional commands, e-mail: struts-user-help@jakarta.apache.org
Re: ssl question
Posted by Max Cooper <ma...@maxcooper.com>.
The second problem is likely an "infinite redirection loop":
Browser: I want http://server/page.jsp
Server: Go to https://server/page.jsp
Browser: I want https://server/page.jsp
Server: Go to http://server/page.jsp
Browser: I want http://server/page.jsp
Server: Go to https://server/page.jsp
... until the browser or server is shut down
You can verify this with a tool like curl or wget, which will allow you to
make a request and examine the response more closely than a browser allows.
You could even do it with telnet.
-Max
----- Original Message -----
From: "Stephane Grenier" <st...@landlordmax.com>
To: "Struts Users Mailing List" <st...@jakarta.apache.org>
Sent: Monday, October 06, 2003 11:40 PM
Subject: Re: ssl question
> As well, it appears that when <sslext:pageScheme is set to "false", it
acts
> as any on the production box. Any suggestions are appreciated.
>
> Thanks
> Stephane
>
> ----- Original Message -----
> From: "Stephane Grenier" <st...@landlordmax.com>
> To: "Struts Users Mailing List" <st...@jakarta.apache.org>
> Sent: Tuesday, October 07, 2003 2:33 AM
> Subject: ssl question
>
>
> Hello all.
>
> I can't seem to find the cause of this particular problem. Perhaps someone
> can point me in the correct direction.
>
> On my local box I'm using sslext with the url being the ip of the box. I
> have no problems going in and out of ssl. The problem has only risen since
I
> moved to the production box with a domain instead of an ip.
>
> The first issue is that when I do a submit on an ssl form, the return url
> removes the "www" from the address and thus my ssl certificate says there
is
> an error "The name on the security certificate is invalid or does not
match
> the name of the site".
>
> The second issue, if I leave the <sslext:pageScheme secure="true" /> in
the
> jsp, it seems to process forever (or until I get bored and stop the
> process).
>
> Any help would be appreciated.
> Thank you,
> Stephane
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: struts-user-unsubscribe@jakarta.apache.org
> For additional commands, e-mail: struts-user-help@jakarta.apache.org
>
>
---------------------------------------------------------------------
To unsubscribe, e-mail: struts-user-unsubscribe@jakarta.apache.org
For additional commands, e-mail: struts-user-help@jakarta.apache.org
Re: ssl question
Posted by Stephane Grenier <st...@landlordmax.com>.
As well, it appears that when <sslext:pageScheme is set to "false", it acts
as any on the production box. Any suggestions are appreciated.
Thanks
Stephane
----- Original Message -----
From: "Stephane Grenier" <st...@landlordmax.com>
To: "Struts Users Mailing List" <st...@jakarta.apache.org>
Sent: Tuesday, October 07, 2003 2:33 AM
Subject: ssl question
Hello all.
I can't seem to find the cause of this particular problem. Perhaps someone
can point me in the correct direction.
On my local box I'm using sslext with the url being the ip of the box. I
have no problems going in and out of ssl. The problem has only risen since I
moved to the production box with a domain instead of an ip.
The first issue is that when I do a submit on an ssl form, the return url
removes the "www" from the address and thus my ssl certificate says there is
an error "The name on the security certificate is invalid or does not match
the name of the site".
The second issue, if I leave the <sslext:pageScheme secure="true" /> in the
jsp, it seems to process forever (or until I get bored and stop the
process).
Any help would be appreciated.
Thank you,
Stephane
---------------------------------------------------------------------
To unsubscribe, e-mail: struts-user-unsubscribe@jakarta.apache.org
For additional commands, e-mail: struts-user-help@jakarta.apache.org