You are viewing a plain text version of this content. The canonical link for it is here.
Posted to general@jakarta.apache.org by Michael Teter <mi...@yahoo.com> on 2000/11/15 09:41:55 UTC
How to require SSL only access to servlets and jsps?
Howdy.
Does anyone know how to limit access to servlets and
jsps to HTTPS only?
With my current setup, Apache + modssl + Tomcat, my
users can access via HTTP or HTTPS. I must figure out
how to force HTTPS only.
How?
Thanks,
Michael Teter
__________________________________________________
Do You Yahoo!?
Yahoo! Calendar - Get organized for the holidays!
http://calendar.yahoo.com/
Re: How to require SSL only access to servlets and jsps?
Posted by Carlos Ramirez <ra...@roses.bna.boeing.com>.
mod_ssl provides the following two directives to force SSL: SSLRequireSSL
and SSLRequire both of which can be used per directory and in .htaccess
files. Of course both forbid access unless HTTPS is used.
For more info: http://www.modssl.org/docs/2.6/ssl_reference.html
-Carlos
Petr Suchomel wrote:
> I don't know is it right
>
> request.getScheme() returns the name of the scheme used to make this
> request, for example, http, https, or ftp.
> than you can send f.e. 404
> Petr
>
> ----- Original Message -----
> From: Michael Teter <mi...@yahoo.com>
> To: <ge...@jakarta.apache.org>
> Sent: Wednesday, November 15, 2000 9:41 AM
> Subject: How to require SSL only access to servlets and jsps?
>
> > Howdy.
> >
> > Does anyone know how to limit access to servlets and
> > jsps to HTTPS only?
> >
> > With my current setup, Apache + modssl + Tomcat, my
> > users can access via HTTP or HTTPS. I must figure out
> > how to force HTTPS only.
> >
> > How?
> >
> > Thanks,
> > Michael Teter
> >
> > __________________________________________________
> > Do You Yahoo!?
> > Yahoo! Calendar - Get organized for the holidays!
> > http://calendar.yahoo.com/
> >
> > ---------------------------------------------------------------------
> > To unsubscribe, e-mail: general-unsubscribe@jakarta.apache.org
> > For additional commands, e-mail: general-help@jakarta.apache.org
> >
> >
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: general-unsubscribe@jakarta.apache.org
> For additional commands, e-mail: general-help@jakarta.apache.org
--
-----------------------------------------------------------------------
Carlos Ramirez + Boeing + Reusable Space Systems + 714.372.4181
-----------------------------------------------------------------------
-- Don't make me use uppercase
Re: How to require SSL only access to servlets and jsps?
Posted by Petr Suchomel <ps...@itsignet.cz>.
I don't know is it right
request.getScheme() returns the name of the scheme used to make this
request, for example, http, https, or ftp.
than you can send f.e. 404
Petr
----- Original Message -----
From: Michael Teter <mi...@yahoo.com>
To: <ge...@jakarta.apache.org>
Sent: Wednesday, November 15, 2000 9:41 AM
Subject: How to require SSL only access to servlets and jsps?
> Howdy.
>
> Does anyone know how to limit access to servlets and
> jsps to HTTPS only?
>
> With my current setup, Apache + modssl + Tomcat, my
> users can access via HTTP or HTTPS. I must figure out
> how to force HTTPS only.
>
> How?
>
> Thanks,
> Michael Teter
>
> __________________________________________________
> Do You Yahoo!?
> Yahoo! Calendar - Get organized for the holidays!
> http://calendar.yahoo.com/
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: general-unsubscribe@jakarta.apache.org
> For additional commands, e-mail: general-help@jakarta.apache.org
>
>