[opencms-dev] Serving JSP generated content under SSL

[Rod Thorburn]

Thanks Ivan,

I read your contributions to the list with interest.

I have implemented your suggestions, and now I can view the output from
certain jsp's under SSL. Unfortunately, I can still also get them under non
SSL (http;//.....), and when clicking on the jsp name from within opencms
(both in the online and offline projects) the output appears in a non SSL
window.

I am using my own form-based tomcat security manager (for the jsp's in
question) and that may have something to do with the problem (there is also
a servlet mapping in web.xml for this little app.), but I don't think so. I
think that I am still missing something in the opencms.properties config.
Any more thoughts?

Regards

Rod

-----Original Message-----
From: Ivan Biddles [mailto:ivanb at scientology.net]
Sent: Monday, 17 February 2003 3:07 p.m.
To: opencms-dev at www.opencms.org
Subject: RE: [opencms-dev] Serving JSP generated content under SSL


Hi Rod,

I am using secure JSPs. I simply set export=https, which means that the
item will not be exported and will use SSL.

I set the equivalent of:

url_prefix_https=https://localhost:8443/${WEB_APP_NAME}/opencms
url_prefix_servername=http://localhost:8080

Everything seems to work fine.

Best wishes,
             Ivan

-----Original Message-----
From: owner-opencms-dev at www.opencms.org
[mailto:owner-opencms-dev at www.opencms.org] On Behalf Of Rod Thorburn
Sent: Sunday, February 16, 2003 17:38
To: opencms-dev at www.opencms.org
Subject: [opencms-dev] Serving JSP generated content under SSL

Hi List,

I'm using opencms5.0 Beta, running on tomcat 4.0.2. I use jsp's to
generate
dynamic content, and therefore the export property for all pages is set
to
false. However, I now want one part of the site to be served under SSL.
There are no html pages in this section - all content is generated by
jsp's.


Has anybody configured opencms to serve jsp's under SSL? I know that
opencms.properties has parameters for SSL, but they appear to relate to
exported content, and as I am using jsp's, none are exported
(statically).
Even adding these properties as below to opencms.properties does'nt
appear
to work:

url_prefix_https=https://localhost:8443/${WEB_APP_NAME}/value/view_recor
d

url_prefix_servername=http://localhost:8080

If I browse to https://my_server:8443/value/view_record/record.jsp I'm
presented with an Apache 404 - Not Found error. However, the content is
still accessable via http. 

Any ideas or clues would be very much appreciated.

Rod
NOTICE: The information contained in this electronic mail message and
any
attachments is confidential to Pavilion Technologies, Inc. or one of its
subsidiaries and may contain proprietary information or be legally
privileged. This message and any attachments are intended only for the
personal and confidential use of the designated recipient(s). If you are
not
the intended recipient or an agent responsible for delivering it to the
intended recipient, you are hereby notified that you have received this
message in error, and that any review, dissemination, distribution or
copying of this message and any attachments is unauthorised and strictly
prohibited. If you have received this message in error, please notify me
immediately by telephone and electronic mail, and delete this message,
any
attachments, and all copies thereof. Thank you very much.
NOTICE: The information contained in this electronic mail message and any
attachments is confidential to Pavilion Technologies, Inc. or one of its
subsidiaries and may contain proprietary information or be legally
privileged. This message and any attachments are intended only for the
personal and confidential use of the designated recipient(s). If you are not
the intended recipient or an agent responsible for delivering it to the
intended recipient, you are hereby notified that you have received this
message in error, and that any review, dissemination, distribution or
copying of this message and any attachments is unauthorised and strictly
prohibited. If you have received this message in error, please notify me
immediately by telephone and electronic mail, and delete this message, any
attachments, and all copies thereof. Thank you very much.