https back to http

[Gabriel Forro]

Hello,

how can I switch back from https protocol to http? I know, that it's possible in programmatic way (by sendRedirect("http://...")), but is there any declarative way (i.e. in web.xml without any programming).

[prasad appecherla]

<web-app>
...
<security-constraint>
...
<user-data-constraint>
<description>requires the data transmission to be integral</description>
<transport-guarantee>INTEGRAL</transport-guarantee>
</user-data-constraint>
...
</security-constraint>
...
</web-app>

transport-guarantee is set to NONE => Plain HTTP
transport-guarantee is set to INTEGRAL or CONFIDENTIAL=> HTTPS

[Gabriel Forro]

Thanks. I understand, that I can switch to https protocol by using INTEGRAL or CONFIDENTAL. But I want to switch back.
For example I have:
pageA - CONFIDENTAL mode
pageB - NONE mode

there is a link on pageA (for example as <a href="<c:url value='pageB'/>">link</a>

1. request to pageA
2. click to link
3. pageB is transferred to the client in https protocol

My question is, whether it is possible to swich back to http at point 3.

[Bahadar Khan]

Gabriel,

It depends on the type of constraints you apply.
On using INTEGRAL you were automatically switched to HTTPS when the resource under that constraint was called. Now if you issue another URL where the resourse is under NONE, then whenver that url-pattern matches then automatically user will be switched to http.

But there is a possibility that any other URL may not be mapped for security issues, in that case just provide the link like 'http://---' so that will be changed to normal (http).