This week's book giveaway is in the OCPJP forum.
We're giving away four copies of OCA/OCP Java SE 7 Programmer I & II Study Guide and have Kathy Sierra & Bert Bates on-line!
See this thread for details.
The moose likes Security and the fly likes Help with https implementation Big Moose Saloon
  Search | Java FAQ | Recent Topics | Flagged Topics | Hot Topics | Zero Replies
Register / Login


Win a copy of OCA/OCP Java SE 7 Programmer I & II Study Guide this week in the OCPJP forum!
JavaRanch » Java Forums » Engineering » Security
Bookmark "Help with https implementation" Watch "Help with https implementation" New topic
Author

Help with https implementation

wrushasen dakhane
Ranch Hand

Joined: Sep 25, 2006
Posts: 47
hi,

Please help me with https implementation in my existing application.

We want to implement https only for the Login.jsp page. The key and certificate has already been installed on the server. Now only the code changes are required.

What I have done :

1. added security-contraint element in web.xml


<!-- SSL Implementation -->
<security-constraint>
<display-name>WebApp Administration</display-name>
<web-resource-collection>
<web-resource-name>Ecrin2 Appln</web-resource-name>
<url-pattern>/Login.jsp</url-pattern>
<web-resource-collection>
<user-data-constraint>
<transport-guarantee>CONFIDENTIAL</transport-guarantee>
<user-data-constraint>
</security-constraint>

Let me know whether login-config is required?
<login-config>
<auth-method>CLIENT-CERT<auth-method>
<realm-name>WebApp Administration</realm-name>
</login-config>


After doing this it gives 404 page not foud exception.


Please let me know what is wrong.


SCJP 1.4, SCWCD 1.4
Ulf Dittmer
Marshal

Joined: Mar 22, 2005
Posts: 42360
    
  64
Which URL are you trying to access? Does it work (or not work) with HTTP or HTTPS?


Ping & DNS - my free Android networking tools app
wrushasen dakhane
Ranch Hand

Joined: Sep 25, 2006
Posts: 47
I want to secure only the Login.jsp page.

so I am putting the location as /Login.jsp
 
I agree. Here's the link: http://aspose.com/file-tools
 
subject: Help with https implementation