You can have tomcat automatically make redirects to https ( and whatever port is configured in the "redirectPort" attribute of your
http Connecter - 443 usually ), you can add some constraints in web.xml. Try this altered for whatever directories you want to be
https only :
<security-constraint>
<web-resource-collection>
<web-resource-name>Some Directories</web-resource-name>
<url-pattern>/secure/*</url-pattern>
<url-pattern>/checkout/*</url-pattern>
</web-resource-collection>
<user-data-constraint>
<transport-guarantee>CONFIDENTIAL</transport-guarantee>
</user-data-constraint>
</security-constraint>
Beware now of issues with welcome-file-list redirects happening at the same time as this one. You can end up with situations where
tomcat sends you to https on the http port. e.g. : https://myserver.com:8080/secure.index.jsp
Steph
> -----Original Message-----
> From: Bill Barker [mailto:wbarker@(protected)]
> Sent: Saturday, October 11, 2003 12:39 AM
> To: tomcat-user@(protected)
> Subject: Re: redirect port 8080 to 443
>
>
> It's in the FAQ:
> http://jakarta.apache.org/tomcat/faq/security.html#https
>
> "Twan Munster" <t.munster@(protected)
> news:005001c38f39$12a22570$1501a8c0@(protected)...
> Hello,
>
> I'm using apache+mod_ssl+mod_jk to make a secure connection.
> But every time I call a page in cocoon it is called through port 8080. Is it
> possible to redirect a call to port 8080 to port 443? And not for the
> entire server, but only for a certain directory?How is this done?
>
> thnx
>
> Twan
>
>
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: tomcat-user-unsubscribe@(protected)
> For additional commands, e-mail: tomcat-user-help@(protected)
>
>
>
---------------------------------------------------------------------
To unsubscribe, e-mail: tomcat-user-unsubscribe@(protected)
For additional commands, e-mail: tomcat-user-help@(protected)