ansaurus

Question

Answer 1

+1 A:

let all links be regular
let the link to the login page be https://...
on the login page make sure all links are http://

For example:

<a href="https://&lt;%= request.getServerName() %>/login.jsp">

(you many need to also include request.getServletContext().getContextPath() as well)

Bozho 2010-05-23 06:50:28

Hi Bozho! You mean i should hardcode everything like http://localhost/common/abc.jsf? rather than /common/abc.jsf?

Ankit Rathod 2010-05-23 11:05:50

not hardcode. Use it dynamically, via `request` - it holds all the data - the server, the url, the context

Bozho 2010-05-23 13:27:09

see my updated answer

Bozho 2010-05-23 13:33:35

Hi Bozho, the solution you posted is not working. When i change from https to http the login fails and i get this exception as i am using jdbcRealm :- INFO: JACC Policy Provider: Failed Permission Check, context(Blogger/Blogger)- permission((javax.security.jacc.WebUserDataPermission /Login/index.jsf GET))

Ankit Rathod 2010-05-26 15:47:43

probably the sessionid is changing that's why this problem is coming

Ankit Rathod 2010-05-26 15:48:10

I've implemented https login in exactly the same way. So perhaps there is something other than this.

Bozho 2010-05-26 16:19:09

Hi Bozho, see this link, i have done it this way :-http://stackoverflow.com/questions/2914751/why-does-this-redirect-not-work-java-ssl

Ankit Rathod 2010-05-26 17:00:06

the first time i do login i get the above exception and the 2nd time i do login :p i go inside members area but with https instead of http. Please help me :(

Ankit Rathod 2010-05-26 17:01:06

Shall i post my whole web.xml here?

Ankit Rathod 2010-05-26 17:03:42

Hi Bozho, i would to add that if i keep simple <a> on my login page and click there then http works fine. But when i am programmatically redirecting using http it doesn't work.

Ankit Rathod 2010-05-26 18:19:59

Answer 2

+1 A:

Check out my answer to this question,

http://stackoverflow.com/questions/1840211/setup-ssl-for-form-login-only-on-tomcat-webapp/1840398#1840398

ZZ Coder 2010-05-23 11:44:44

ansaurus

tags:

views:

answers:

SSL question java web application

related questions