Web App Security

[Ankit Nagpal]

Hi,

I am using FORM based authentication for my web application. For implementing data integrity and confidentiality, i have used the following in the DD:

<user-data-constraint>
<transport-guarantee>CONFIDENTIAL</transport-guarantee>
</user-data-constraint>

When I try to request a static HTML page by the following URL:

http://localhost:9080/AppName/first.html

this changes to

https://localhost:8443/AppName/first.html

and gives the error that page is unavailable. I know that it's trying to use HTTPS but why is this not working? Do I need to add something somewhere in my application?

BTW, I am using Tomcat 5.5 as server.

Thanks in advance.

[ September 27, 2008: Message edited by: Ankit Nagpal ]
[ September 27, 2008: Message edited by: Ankit Nagpal ]

[Ankit Nagpal]

I found the solution to this problem, the SSL Configuration needs to be done on Tomcat. Steps are given in the link below:

Tomcat SSL Configuration - How To