HTTPS for login

[Adkron]

I am writing a java struts app. The end user is connecting to the app via http. My app takes their username and password and passes it to an http server. That works fine, but now they want me to change my verification from http to https. If I just change the URL it will not authenticate with the server, but if I type the server address in my browser I can then verify there, but that isn't in my application. Any ideas?

Amos
Programer/Analyst
United States Postal Service

 

[Diancecht]

Maybe this helps:

http://www.javaworld.com/javaworld/javatips/jw-javatip96.html

Cheers,
Dian

 

[Adkron]

No luck.

Amos
Programer/Analyst
United States Postal Service

 

[sedj]

HTTP and HTTPS are not a verification mechanism - they are a protocol. One is encrypted using SSL, the other is not.

You do not mention which servlet container you are using, nor do you specify what "does not verify" means. Please elaborate.

--------------------------------------------------
Free Java/J2EE Database Connection Pooling Software

http://www.primrose.org.uk

 

[Adkron]

I know this. I'm passing the verification over https in one instance. If go to the verification server in a browser a username password box pops up. It doesn matter if I use http or https. And I can verify my user. Now when I add it to an application and I pass the username and password to the verification server it only works under http.

Amos
Programer/Analyst
United States Postal Service

 

[Diancecht]

How are you passing the data? Is it a form autenthication? What kind of application are you authenticating against?

Cheers,
Dian

 

[Adkron]

I don't know what the application is. All I know is it is running on an IBM mainframe computer, and I pass it the username and password by forming a url to send it.

Amos
Programer/Analyst
United States Postal Service