Mailing-List: contact users-help@tomcat.apache.org; run by ezmlm
Precedence: bulk
Reply-To: "Tomcat Users List" <users@tomcat.apache.org>
Received-SPF: pass (asf.osuosl.org: local policy)
Content-class: urn:content-classes:message
MIME-Version: 1.0
Content-Type: text/plain;
	charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
Subject: RE: SSL Certificate Beginner Question
Date: Thu, 1 Dec 2005 09:00:09 -0600
Message-ID: 
 <AEF3D568DD1D9E428048C592AA164597030F8024@USRV-EXCH4.na.uis.unisys.com>
Thread-Topic: SSL Certificate Beginner Question
Thread-Index: AcX2cCCpiivdVfpCSESJ2oYyFA2cewAEXgKg
From: "Caldarale, Charles R" <Chuck.Caldarale@unisys.com>
To: "Tomcat Users List" <users@tomcat.apache.org>

> From: Paul Singleton [mailto:paul@jbgb.com]=20
> Subject: Re: SSL Certificate Beginner Question
>=20
> David Wall wrote:
> >=20
> > ...if the user accesses your site with http://xxxx,=20
> > the port 80 Connector (or 8080 if testing or using a=20
> > non-standard port) has a "redirectPort" element that=20
> > causes Tomcat to automatically issue a redirect using=20
> > https://xxxx
>=20
> Are you sure?  I thought redirectPort was only useful for
> redirecting _https_ requests which were sent to the wrong port...

Don't know if he's sure or not, but he is correct.  If the deployment
descriptor has transport-guarantee set to CONFIDENTIAL, Tomcat
automatically switches the request to https.  See section 12.8 of the
servlet spec.

 - Chuck


THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY
MATERIAL and is thus for use only by the intended recipient. If you
received this in error, please contact the sender and delete the e-mail
and its attachments from all computers.

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org