relaying SSL request to a non-SSL server

[Paul Singleton <pa...@jbgb.com>]

Our app, sometimes accessed with SSL, returns pages
with references to images from a non-SSL-enabled server.

Our customer complains that this can trigger IE to pop
up a dialog with

  This page contains both secure and nonsecure items.
  Do you want to display the nonsecure items?

and wants us (rather than ther user, or Microsoft :-)
to prevent this from happening.

I am considering making our app accept and relay SSL
requests for images by opening a java.net.URLConnection
to the non-SSL image, getting its content, calling
setContentType(), setContentLength() etc. on the
HttpServletResponse and writing the image data to the
ServletOutputStream.

Is there an easier way?  I cannot SSL-enable the image
server :-(

If I do this, how should I read the binary data from
the InputStream and write it to the ServletOutputStream?

Paul Singleton


-- 
No virus found in this outgoing message.
Checked by AVG Anti-Virus.
Version: 7.0.344 / Virus Database: 267.11.1/104 - Release Date: 16/Sep/2005


---------------------------------------------------------------------
To unsubscribe, e-mail: tomcat-user-unsubscribe@jakarta.apache.org
For additional commands, e-mail: tomcat-user-help@jakarta.apache.org