File APIs for Java Developers
Manipulate DOC, XLS, PPT, PDF and many others from your application.
The moose likes Servlets and the fly likes Struts, SSL, and converting between them Big Moose Saloon
  Search | Java FAQ | Recent Topics | Flagged Topics | Hot Topics | Zero Replies
Register / Login
JavaRanch » Java Forums » Java » Servlets
Bookmark "Struts, SSL, and converting between them" Watch "Struts, SSL, and converting between them" New topic

Struts, SSL, and converting between them

Brad Canard

Joined: Dec 10, 2002
Posts: 6
I have been struggling with getting SSL to work with some pages in my application. I am using Struts on Tomcat 4.1. What I am looking to do is to have certain pages redirect to https, but the rest of the pages use http. I don't want to use redirects as this will show the jsp instead of the action call.
I saw on the struts faq on apache a reference to sslext on sourceforge. Has anyone used this? Does anyone recommend it? Anyone have other solutions?
Thanks for any help
chanoch wiggers
Ranch Hand

Joined: May 24, 2001
Posts: 245
which version of struts are you using? this has been discussed at length on the dev list and i thought somebody came up with a solution?
thinking about it, i seem to remember that the conclusion from many people was that an SSL site should be treated as a seperate entity for security's sake and therefore you should maybe deploy a seperate sll struts application if you want to hide the jsp pages being deployed.
btw, i certainly remember the guys saying that best practices should only be followed as far as they help you. if you are avoiding jsps for maintaining pure model 2 then i wouldnt worry too much about that, especially since (off the top of my head) it allows you to get around your problem, avoid treating two seperate entities into one.

chanoch<p><a href="" target="_blank" rel="nofollow">Author of Professional Apache Tomcat</a></p>
I agree. Here's the link:
subject: Struts, SSL, and converting between them
It's not a secret anymore!