Return-Path: 
 <user-return-5637-apmail-roller-user-archive=roller.apache.org@roller.apache.org>
Delivered-To: apmail-roller-user-archive@www.apache.org
Received: (qmail 36098 invoked from network); 12 Jun 2009 03:26:46 -0000
Received: from hermes.apache.org (HELO mail.apache.org) (140.211.11.3)
  by minotaur.apache.org with SMTP; 12 Jun 2009 03:26:46 -0000
Received: (qmail 94025 invoked by uid 500); 12 Jun 2009 03:26:57 -0000
Delivered-To: apmail-roller-user-archive@roller.apache.org
Received: (qmail 93956 invoked by uid 500); 12 Jun 2009 03:26:56 -0000
Mailing-List: contact user-help@roller.apache.org; run by ezmlm
Precedence: bulk
List-Help: <mailto:user-help@roller.apache.org>
List-Unsubscribe: <mailto:user-unsubscribe@roller.apache.org>
List-Post: <mailto:user@roller.apache.org>
List-Id: <user.roller.apache.org>
Reply-To: user@roller.apache.org
Delivered-To: mailing list user@roller.apache.org
Received: (qmail 93944 invoked by uid 99); 12 Jun 2009 03:26:55 -0000
Received: from athena.apache.org (HELO athena.apache.org) (140.211.11.136)
    by apache.org (qpsmtpd/0.29) with ESMTP; Fri, 12 Jun 2009 03:26:55 +0000
X-ASF-Spam-Status: No, hits=2.7 required=10.0
	tests=SPF_NEUTRAL,WEIRD_PORT
X-Spam-Check-By: apache.org
Received-SPF: neutral (athena.apache.org: local policy)
Received: from [68.142.199.181] (HELO web305.biz.mail.mud.yahoo.com)
 (68.142.199.181)
    by apache.org (qpsmtpd/0.29) with SMTP; Fri, 12 Jun 2009 03:26:46 +0000
Received: (qmail 77131 invoked by uid 60001); 12 Jun 2009 03:26:24 -0000
Message-ID: <361587.72018.qm@web305.biz.mail.mud.yahoo.com>
X-YMail-OSG: 
 ZZZVjN0VM1kc2OrrBM3oGBasVUw1kjWUCfbbUSbmF07SQn0qUAptpCnhaFRr45Wv5_cEUu8QU.OTGl1yo56PGJuQNCuiW1roxuN.t1kUli9E8ExAdVHdsETIBOA6aGRjs3D1PeZMCNnHXedkMbLS9xNb34UGydtwfZuy8UTyBCKK2Iu9mgDH5YVPUg6ZyjOR4EMmoSY3S0WrjVyrAib29ICbYw2C3Ep9wXsiu9GfqKymzO.q_warVOtw8yUvimnYpO9xl.SuVolE1Eh6iodBlgvIqGS37BSAqegiukVt9jVx9Pf5mj5lf7L.xs.eZBgosBZgrdx_yLLEOMCKjq.A38X6meMlNA3zsVQM
Received: from [70.91.36.9] by web305.biz.mail.mud.yahoo.com via HTTP;
 Thu, 11 Jun 2009 20:26:24 PDT
X-Mailer: YahooMailClassic/5.4.12 YahooMailWebService/0.7.289.10
Date: Thu, 11 Jun 2009 20:26:24 -0700 (PDT)
From: "\(David\) Ming Xia" <david.ming.xia@ibol.biz>
Reply-To: david.ming.xia@ibol.biz
Subject: Re: Problem in switching to HTTPS channel
To: user@roller.apache.org
MIME-Version: 1.0
Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: quoted-printable
X-Virus-Checked: Checked by ClamAV on apache.org


All,=20

 I modified security.xml as following:

---------------------------------------------------=A0
<property name=3D"filterInvocationDefinitionSource">
<value>
CONVERT_URL_TO_LOWERCASE_BEFORE_COMPARISON
PATTERN_TYPE_APACHE_ANT
/roller_j_security_check=3DREQUIRES_SECURE_CHANNEL
/roller-ui/login-redirect.jsp=3DREQUIRES_SECURE_CHANNEL
/roller-ui/login.rol=3DREQUIRES_SECURE_CHANNEL
/roller-ui/register.rol=3DREQUIRES_SECURE_CHANNEL
/roller-ui/register!save.rol=3DREQUIRES_SECURE_CHANNEL
</value>
</property>=20
-----------------------------------------------------

I also modified roller-custom.properties

---------------------------------------------------
# Enables HTTPS for login page only
securelogin.enabled=3Dtrue
# Enable scheme enforcement?
# Scheme enforcement ensures that specific URLs are viewed only via HTTPS
schemeenforcement.enabled=3Dtrue
---------------------------------------------------


I tried https://localhost:9443/blog/roller-ui/login-redirect.rol and https:=
//localhost:9443/blog/roller-ui/register.rol
It still doesn't work.   Any idea?


Thank you very much.

David




--- On Thu, 6/11/09, (David) Ming Xia <david.ming.xia@ibol.biz> wrote:


From: (David) Ming Xia <david.ming.xia@ibol.biz>
Subject: Problem in switching to HTTPS channel
To: "Mailing List Apache Roller User" <user@roller.apache.org>, "Mailing Li=
st Apache Roller Developer" <dev@roller.apache.org>
Date: Thursday, June 11, 2009, 11:05 AM


Hi, Everyone.=20
=A0=20
=A0 I=A0could not set up=A0switching to HTTPS channel for login.=A0=A0 I ad=
ded couple of line into security.xml as illustrated in the following sample=
 code.=A0 I started the application and tried to login at https://localhost=
:9443/blog/roller-ui/login.rol.=A0 The login page was not load up.
=A0
=A0
=A0 I would appreciate if some one could give=A0some advices.=A0 Do=A0I nee=
d=A0to something=A0in addition to=A0change security.xml?=A0=20
=A0=20
=A0=20
=A0=20
Thank you for your help.=A0=20
=A0=20
David=20
=A0=20
<!-- =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D SSL SW=
ITCHING =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D -->=20
<bean id=3D"channelProcessingFilter" class=3D"org.acegisecurity.securechann=
el.ChannelProcessingFilter">=20
<property name=3D"channelDecisionManager" ref=3D"channelDecisionManager"/>=
=20
<property name=3D"filterInvocationDefinitionSource">=20
<value>=20
CONVERT_URL_TO_LOWERCASE_BEFORE_COMPARISON=20
PATTERN_TYPE_APACHE_ANT=20
/roller_j_security_check=3DREQUIRES_SECURE_CHANNEL=20
/roller-ui/login.rol=3DREQUIRES_SECURE_CHANNEL=20
/roller-ui/login-redirect.rol=3DREQUIRES_SECURE_CHANNEL=20
/**=3DREQUIRES_INSECURE_CHANNEL=20
</value>=20
</property>=20
</bean>=20
<bean id=3D"channelDecisionManager" class=3D"org.acegisecurity.securechanne=
l.ChannelDecisionManagerImpl">=20
<property name=3D"channelProcessors">=20
<list>=20
<bean class=3D"org.acegisecurity.securechannel.SecureChannelProcessor"/>=20
<bean class=3D"org.acegisecurity.securechannel.InsecureChannelProcessor"/>=
=20
</list>=20
</property>=20
</bean>=20
=A0