Security settings? Problem with downloading an excel file using link over SSL!

[Tom Javen <to...@yahoo.ca>]

I am running Tomcat 4.0.3 with JDK 1.4 on Solaris 8.
In my index.html page, I have a link defined as
a
href="https://192.168.0.1:8443/spreadshhet/may20.xls.

In the server.xml, I have enabled SSL/8443. MIME is
set for MS Excel.

When I clicked the link, IE complains IE cannot
download my20.xls from  192.168.0.1. IE wasn't able to
open the site. But when I use port 8080 with link as 
a href="http://192.168.0.1:8080/spreadshhet/may20.xls,
it is just fine. Can someone tell me what is wrong
with my security settings?

Thanks!!!

Tom Javen
tomjaven@yahoo.ca
web.xml
<?xml version="1.0" encoding="ISO-8859-1"?>
<!DOCTYPE web-app PUBLIC 
    "-//Sun Microsystems, Inc.//DTD Web Application
2.2//EN"
    "http://java.sun.com/j2ee/dtds/web-app_2_2.dtd">

<web-app>
  <welcome-file-list>
    <welcome-file>index.jsp</welcome-file>
  </welcome-file-list>
  
 <security-constraint>
    <web-resource-collection>
      <web-resource-name>First</web-resource-name>
      <url-pattern>*</url-pattern>
    </web-resource-collection>
    <auth-constraint>
      <role-name>tomcat</role-name>
    </auth-constraint>
  </security-constraint>
 
 <security-constraint>
    <web-resource-collection>
     
<web-resource-name>spreadsheet</web-resource-name>
      <url-pattern>/spreadsheet/*</url-pattern>
    </web-resource-collection>
    <auth-constraint>
      <role-name>tomcat</role-name>
    </auth-constraint>
  </security-constraint>
 
  <!-- Tell the server to use form-based
authentication. -->
  <login-config>
    <auth-method>FORM</auth-method>
    <form-login-config>
      <form-login-page>/login.jsp</form-login-page>
     
<form-error-page>/login-error.jsp</form-error-page>
    </form-login-config>
  </login-config>
</web-app>


______________________________________________________________________ 
Post your ad for free now! http://personals.yahoo.ca

--
To unsubscribe, e-mail:   <ma...@jakarta.apache.org>
For additional commands, e-mail: <ma...@jakarta.apache.org>