Chris, Chuck:
Thanks a lot by the explanation. Looks like Tomcat (or maybe the
"Servlet specification"?) needs a mechanism to switch from https to
http when this access is declared by a <security-constrains> otherwise
is forcing programmers to always use programatic security to made this
switch; anyway we get paid to do this stuff ;-)
May be a "workarround" is to use the rewrite filter located at
http://tuckey.org/urlrewrite/
Somebody is using it? is reliable?
Cheers!
- Pablo
On 1/3/07, Caldarale, Charles R <Chuck.Caldarale@(protected):
> > From: John Doe [mailto:yrmlfb@(protected)]
> > Subject: from https to http?
>
> > _but_ when I want to go from "restricted.jsp" back to
> > "index.jsp" using the anchor defined in it the URL is
> > not replace by the standard "http" URL and then gets
> > stuck with a "https://localhost:8443/testSSL/index.jsp"
>
> To expand a bit on what Chris said:
>
> Look at the form of the link in restricted.jsp:
> > <a href="../index.jsp">Back to index</a>
>
> It's a relative link, so the browser (not Tomcat) resolves it based on
> the URL of the current page. The same happened when you went from
> index.jsp to ssl/restricted.jsp, except Tomcat recognized that ssl was
> controlled with a <security-constraint>, so it generated a redirect back
> to the browser with the http protocol and port replaced by https and the
> redirect port; the browser then made the actual https request.
>
> - Chuck
>
>
> THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY
> MATERIAL and is thus for use only by the intended recipient. If you
> received this in error, please contact the sender and delete the e-mail
> and its attachments from all computers.
>
> ---------------------------------------------------------------------
> To start a new topic, e-mail: users@(protected)
> To unsubscribe, e-mail: users-unsubscribe@(protected)
> For additional commands, e-mail: users-help@(protected)
>
>
---------------------------------------------------------------------
To start a new topic, e-mail: users@(protected)
To unsubscribe, e-mail: users-unsubscribe@(protected)
For additional commands, e-mail: users-help@(protected)
