[opencms-dev] Delivering site with http and https

[Florian Hopf]

Hi Bernd,

thanks for your reply.

] Code Create [ Bernd Wolfsegger schrieb:
> perhaps I don't understand your problem correctly, but if you use relative
> links only on your site and no base href to some http, you should stay https
> if you are on a https page with relative links on it.
> That’s completely independent from Opencms.
> 

You are right, this would work. But it doesn't when you use <cms:link>
which prepends the http-server prefix for any links to non secure
resources if you are on the secured page.

My understanding is that the secure-machanism is similar to the
multisite behaviour: If you access a resource that is marked as secure,
the special secure server/site is used. If you access a resource that
isn't marked as secure the default site server is used. And when
switching between two sites cms:link results in an absolute url.

Regards
Florian

> Kind regards, Bernd
> 
>> -----Ursprüngliche Nachricht-----
>> Von: opencms-dev-bounces at opencms.org [mailto:opencms-dev-
>> bounces at opencms.org] Im Auftrag von Florian Hopf
>> Gesendet: Montag, 3. Januar 2011 12:05
>> An: The OpenCms mailing list
>> Betreff: [opencms-dev] Delivering site with http and https
>>
>> Hi,
>>
>> I'd like to deliver a site using http but when a user logs in it should
>> switch to https and stay on https. What's the best way of doing this?
>>
>> I tried setting my login jsp as a secure resource and added the https
>> server as alias. The login works ok but when I navigate to a resource
>> that is not marked as secure it switches back to http and the login is
>> lost as the cookie is only valid for https.
>>
>> Is it possible to do something like this using the OpenCms mechanisms?
>>
>> Regards
>> Florian
>>
>>
>> _______________________________________________
>> This mail is sent to you from the opencms-dev mailing list
>> To change your list options, or to unsubscribe from the list, please
>> visit
>> http://lists.opencms.org/mailman/listinfo/opencms-dev
> 
> 
> _______________________________________________
> This mail is sent to you from the opencms-dev mailing list
> To change your list options, or to unsubscribe from the list, please visit
> http://lists.opencms.org/mailman/listinfo/opencms-dev


-- 
/**
 * Florian Hopf
 * Synyx GmbH & Co. KG
 * OpenSource Solutions
 * Karlstr. 68
 * 76137 Karlsruhe
 * phone  +49(0)721 911 83 03
 * fax   +49(0)721 66 48 877
 * www   http://www.synyx.de
 * blog  http://blog.synyx.de
 * blog  http://mobile.synyx.de
 * forum http://www.opencms-forum.de
 * irc   irc://irc.synyx.de
 *
 * Sitz der Gesellschaft: Karlsruhe
 * Registergericht: Mannheim
 * Handelsregisternummer: HRA 4793
 * USt-IdNr.: DE249264296
 *
 * Komplementärin: Elatech Verwaltungs GmbH
 * Sitz der Gesellschaft: Karlsruhe
 * Geschäftsführer: Markus Daniel
 * Registergericht: Mannheim
 * Handelsregisternummer: HRB 7250
 */