Re: securing a non-login protected page with SSL

This is an OpenPGP/MIME signed message (RFC 2440 and 3156)
--===============6524168604008378697==
Content-Type: multipart/signed; micalg=pgp-sha1;
	protocol="application/pgp-signature";
	boundary="------------enigE87581F3CDE228751DABE244"

This is an OpenPGP/MIME signed message (RFC 2440 and 3156)
--------------enigE87581F3CDE228751DABE244
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

Torgeir,

Torgeir Veimo wrote:
> On 8 Nov 2008, at 10:56, Matthew Hixson wrote:
>=20
>> On my dev system Tomcat listens to HTTP on 8080 and HTTPS on 8443.
>> For reasons I won't go into here I need to keep these port numbers so
>> I'd rather configure Security Filter to suit my Tomcat setup rather
>> than configure Tomcat to suit Security Filter.
>=20
> I actually thought the port number was handled automatically by the =20
> servlet container, but I guess it isn't.

The port number is automatically handled by the container when you are
using container-managed authentication. Since the OP is using sf, the
container is not involved.

> Set the property ssl-redirect-port to 8443 on the filter config for =20
> the security filter.

Apologies for lack of documentation of these settings. We're still
working on a strategy for moving forward: we want to keep the XML format
as close to the web.xml standard, but we have all these extra parameters
and setup. Some have gone into web.xml through servlet filter config
parameters, and others have gone into the XML file. Hopefully, sf 3.0
will have a more unified strategy for specifying all this stuff.

-chris



--------------enigE87581F3CDE228751DABE244
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: OpenPGP digital signature
Content-Disposition: attachment; filename="signature.asc"

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iEYEARECAAYFAkkYQ7gACgkQ9CaO5/Lv0PDHUgCdFkYVCymOOL9zonw1sVj+MKcx
u7oAn1UsL+cI5wANQ71w0ujqa//VCu+U
=ECB4
-----END PGP SIGNATURE-----

--------------enigE87581F3CDE228751DABE244--


--===============6524168604008378697==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

-------------------------------------------------------------------------
This SF.Net email is sponsored by the Moblin Your Move Developer's challenge
Build the coolest Linux based applications with Moblin SDK & win great prizes
Grand prize is a trip for two to an Open Source event anywhere in the world
http://moblin-contest.org/redirect.php?banner_id=100&url=/
--===============6524168604008378697==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

_______________________________________________
securityfilter-user mailing list
securityfilter-user-5NWGOfrQmneRv+LV9MX5uipxlwaOVQ5f@public.gmane.org
https://lists.sourceforge.net/lists/listinfo/securityfilter-user

--===============6524168604008378697==--