The moose likes Servlets and the fly likes Struts, SSL, and converting between them Big Moose Saloon
  Search | Java FAQ | Recent Topics | Flagged Topics | Hot Topics | Zero Replies
Register / Login

Win a copy of OCA Java SE 8 Programmer I Study Guide this week in the OCAJP 8 forum!
JavaRanch » Java Forums » Java » Servlets
Bookmark "Struts, SSL, and converting between them" Watch "Struts, SSL, and converting between them" New topic

Struts, SSL, and converting between them

Brad Canard

Joined: Dec 10, 2002
Posts: 6
I have been struggling with getting SSL to work with some pages in my application. I am using Struts on Tomcat 4.1. What I am looking to do is to have certain pages redirect to https, but the rest of the pages use http. I don't want to use redirects as this will show the jsp instead of the action call.
I saw on the struts faq on apache a reference to sslext on sourceforge. Has anyone used this? Does anyone recommend it? Anyone have other solutions?
Thanks for any help
chanoch wiggers
Ranch Hand

Joined: May 24, 2001
Posts: 245
which version of struts are you using? this has been discussed at length on the dev list and i thought somebody came up with a solution?
thinking about it, i seem to remember that the conclusion from many people was that an SSL site should be treated as a seperate entity for security's sake and therefore you should maybe deploy a seperate sll struts application if you want to hide the jsp pages being deployed.
btw, i certainly remember the guys saying that best practices should only be followed as far as they help you. if you are avoiding jsps for maintaining pure model 2 then i wouldnt worry too much about that, especially since (off the top of my head) it allows you to get around your problem, avoid treating two seperate entities into one.

chanoch<p><a href="" target="_blank" rel="nofollow">Author of Professional Apache Tomcat</a></p>
I agree. Here's the link:
subject: Struts, SSL, and converting between them
It's not a secret anymore!