geronimo-user mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Stefan Schmidt <schmidt...@gmail.com>
Subject Enforcing SSL for Web- and EJB-tier
Date Sat, 13 Aug 2005 23:10:24 GMT
<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
  <meta content="text/html;charset=ISO-8859-1" http-equiv="Content-Type">
  <title></title>
</head>
<body bgcolor="#ffffff" text="#000000">
Hi,<br>
<br>
I am currently playing around with some security settings.<br>
<br>
I was wondering how I can enforce the usage of SSL? I tried the
following in the web.xml but with no success:<br>
<br>
&nbsp;&nbsp;&nbsp; &lt;security-constraint&gt;<br>
&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp; &lt;web-resource-collection&gt;<br>
&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp;
&lt;web-resource-name&gt;SomeName&lt;/web-resource-name&gt;<br>
&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp;
&lt;url-pattern&gt;/*&lt;/url-pattern&gt;<br>
&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp;
&lt;http-method&gt;POST&lt;/http-method&gt;<br>
&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp;
&lt;http-method&gt;GET&lt;/http-method&gt;<br>
&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp; &lt;/web-resource-collection&gt;<br>
&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp; &lt;user-data-constraint&gt;<br>
&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp;
&lt;transport-guarantee&gt;CONFIDENTIAL&lt;/transport-guarantee&gt;<br>
&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp; &lt;/user-data-constraint&gt;<br>
&nbsp;&nbsp;&nbsp; &lt;/security-constraint&gt;<br>
<br>
What else do I need to set this up properly? How do I enforce the same
for EJBs?<br>
<br>
Thanks.<br>
<br>
Regards,<br>
<br>
Stefan Schmidt<br>
</body>
</html>

Mime
View raw message