Re-directing SSL Connections

[twayderzzz]

Hey Everyone,

I'm a tomcat newbie, so please bear with me. I have tomcat configured to serve content, and everything works great. Im running it in-line with an ssl accelerator. I can get it to serve secure pages when i type "

https://",

but I want it to default to that, and I cant seem to figure it out.

Any held is greatly appreciated.

Wade

 

[siberian]

I would accomplish this by using mod_jk and apache in front. Then its a fairly simple exercise to use an extra apache vhost to handle this.

Alternatively you could check and see if your ssl accelerator is setting an environment variable or request header indicating the security settings. if so you can key off that and issue a redirect. This is quite common but still specific to your accelerator.

 

[sedj]

Can't you just set the SSL Connector to port 80 or 8080(instead of 443/8443 defaults) in server.xml ?

Eg :

<Connector port="80"
maxThreads="150" minSpareThreads="25" maxSpareThreads="75"
enableLookups="false" disableUploadTimeout="true"
acceptCount="100" debug="0" scheme="https" secure="true"
clientAuth="false" sslProtocol="TLS" />

--------------------------------------------------
Free Database Connection Pooling Software

http://www.primrose.org.uk

 

[siberian]

That might trigger an error in IE since you'll be running https over http.

It also most likely wouldn't trigger the IE 'lock'icon which users expect to see if they are using an SSL connection.

 

[sedj]

ignore my ramblings ... of course it wouldn't work as the browser is expecting different protocols, so you end up with gobbledegook on the page !

--------------------------------------------------
Free Database Connection Pooling Software

http://www.primrose.org.uk

 

[dtrmined]

I just had some problems setting this up on my box.

I have apache-1.3 and mod_ssl. I wanted to secure the site entirely without linking to the https section with a script or hard link.

http://www.tek-tips.com/viewthread.cfm?SQID=881088&SPID=65&newpid=65&page=1

- This post seems to have it covered.

 

[byam]

If you are using Struts, then you can use SSL Extension that can enforce selective servlets using SSL. It will auto redirect individual page to configured scheme. Alternatively, you can implement a servlet filter to do that.