Help with https implementation

[wrushasen dakhane]

hi,

Please help me with https implementation in my existing application.

We want to implement https only for the Login.jsp page. The key and certificate has already been installed on the server. Now only the code changes are required.

What I have done :

1. added security-contraint element in web.xml


<!-- SSL Implementation -->
<security-constraint>
<display-name>WebApp Administration</display-name>
<web-resource-collection>
<web-resource-name>Ecrin2 Appln</web-resource-name>
<url-pattern>/Login.jsp</url-pattern>
<web-resource-collection>
<user-data-constraint>
<transport-guarantee>CONFIDENTIAL</transport-guarantee>
<user-data-constraint>
</security-constraint>

Let me know whether login-config is required?
<login-config>
<auth-method>CLIENT-CERT<auth-method>
<realm-name>WebApp Administration</realm-name>
</login-config>


After doing this it gives 404 page not foud exception.


Please let me know what is wrong.

[Ulf Dittmer]

Which URL are you trying to access? Does it work (or not work) with HTTP or HTTPS?

[wrushasen dakhane]

I want to secure only the Login.jsp page.

so I am putting the location as /Login.jsp