[SSL] Adding security constraint to web.xml to exclude ressources

[Kacem Bel]

Hello guys,


I have a JEE6 web application [JSF2] under JBoss 6.0.0 final on eclipse, i have installed the SSL and everything works fine, then i wanted to exclude some ressources from being forced to use SSL,
I added the following to web.xml:

<security-constraint> <web-resource-collection> <web-resource-name>unsecuredapp</web-resource-name> <url-pattern>/appname/folder1/index.jsf</url-pattern> </web-resource-collection> <user-data-constraint> <transport-guarantee>NONE</transport-guarantee> </user-data-constraint> </security-constraint> <security-constraint> <web-resource-collection> <web-resource-name>securedapp</web-resource-name> <url-pattern>/*</url-pattern> </web-resource-collection> <user-data-constraint> <transport-guarantee>CONFIDENTIAL</transport-guarantee> </user-data-constraint> </security-constraint>

Now that i have made the exception for the URL above, i dont know why i still can't access the URL : http://localhost:8080/appname/folder1/index.jsf
and it becomes accessible when i turn it to : https://localhost:8443/appname/folder1/index.jsf , which means that it is still forced to use SSL


please give me advices or anything that could help resolving this, thanks in advance



-Kacem

[manjesh ipp]

Did you check the "Connector" element of server.xml ?

[Kacem Bel]

hi,

It worked just as it is.. I think there was something wrong with JBoss AS itself

thanks anyways for your feedback : )