Get the tools you need to learn Java skills fast!
Video tutorials, eBooks, hands-on lab exercises, sample code.
A friendly place for programming greenhorns!
Big Moose Saloon
Register / Login
Win a copy of
The Software Craftsman
this week in the
[SSL] Adding security constraint to web.xml to exclude ressources
Joined: Jan 26, 2011
Mar 06, 2013 04:19:48
I have a JEE6 web application [JSF2] under
6.0.0 final on eclipse, i have installed the SSL and everything works fine, then i wanted to exclude some ressources from being forced to use SSL,
I added the following to web.xml:
<security-constraint> <web-resource-collection> <web-resource-name>unsecuredapp</web-resource-name> <url-pattern>/appname/folder1/index.jsf</url-pattern> </web-resource-collection> <user-data-constraint> <transport-guarantee>NONE</transport-guarantee> </user-data-constraint> </security-constraint> <security-constraint> <web-resource-collection> <web-resource-name>securedapp</web-resource-name> <url-pattern>/*</url-pattern> </web-resource-collection> <user-data-constraint> <transport-guarantee>CONFIDENTIAL</transport-guarantee> </user-data-constraint> </security-constraint>
Now that i have made the exception for the URL above, i dont know why i still can't access the URL :
and it becomes accessible when i turn it to :
, which means that it is still forced to use SSL
please give me advices or anything that could help resolving this, thanks in advance
OCP-JP 6 - OCE-JPAD - OCE-EJBD
Joined: Jan 01, 2011
Apr 03, 2013 11:30:46
Did you check the "Connector" element of server.xml ?
Joined: Jan 26, 2011
Apr 20, 2013 06:05:06
It worked just as it is.. I think there was something wrong with JBoss AS itself
thanks anyways for your feedback : )
Have you tried LearnNowOnline?
subject: [SSL] Adding security constraint to web.xml to exclude ressources
Problem with https
http https switch
Switch back to HTTP after HTTPS page
HttpServletRequest - RequestDispatcher - Forward - is not using Constraint
JBOSS web logon not redirecting from port 8080 to 8443 at login
All times are in JavaRanch time: GMT-6 in summer, GMT-7 in winter
| Powered by
Copyright © 1998-2015