File APIs for Java Developers
Manipulate DOC, XLS, PPT, PDF and many others from your application.
The moose likes Other Java Products and Servers and the fly likes Http, Https and sessions Big Moose Saloon
  Search | Java FAQ | Recent Topics | Flagged Topics | Hot Topics | Zero Replies
Register / Login
JavaRanch » Java Forums » Products » Other Java Products and Servers
Bookmark "Http, Https and sessions" Watch "Http, Https and sessions" New topic

Http, Https and sessions

Sean MacLean
Ranch Hand

Joined: Nov 07, 2000
Posts: 621
Here's a scenario that, hopefully, someone can shed some light one. We currently have a web application up an running using iPlanet 4.3. The client wants the login to use SSL (https). Ok, this is not a problem. However, the rest of the site is simply http. In setting up iPlanet to handle SSL, we found that the server instance can only listen to either the https or the http port! The probelm is, if they login using https, and we set the session variables (indicating that they have loggin, etc) and then redirect them to the rest of the site (http, which is a client stipulation so https for the whole site is not an option) then session is lost. Obviously, this is because we're moving from one server instance to another. We can hack a solution, but I'm wondering if this is an issue that others have encountered? Using weblogic for instance, allows the same server instance to listen to both ports and the sesson is retained. Any thoughts?
Chandra Velpula

Joined: Sep 30, 2004
Posts: 1

Hope this might work out.
1.Using Iplnet as proxy by configuring iplanet using netscape plug in
2 makeing HTTPS between client and Iplanet
3.Then you can choose the option of http/https between iplanet and app server

check the url

I agree. Here's the link:
subject: Http, Https and sessions
It's not a secret anymore!