Force resources to be served only via SSL?

[dforbu]

I have some servlets that I want to ensure only get served via SSL. Right now

http://www.mydomain.com/servlets/login

and

https://www.mydomain.com/servlets/login

both work. I need to block the non-SSL URL, or redirect it to the SSL URL, how can I make this happen? I have a lot of servlets like this accessible thru several virtual hosts, so if I have to add a line to httpd.conf for each servlet for each VH, I wouldn't mind forcing ALL servlets to run over SSL if it's quick and easy. Either way, whatever it takes. Apache uses JK2 to hand off the request to Tomcat, running on Linux (Fedora Core 3).

 

[ericbrunson]

I'd take a different tack. Make the servlets/login a virtualhost and make the host only listen on the SSL port. Or run SSL on port 80 for that virthost.