AW: Service available for HTTPS only? (no HTTP)

[Stefan Rainer-2]

Hello,

thanks for answering.

In my web.xml file I don't find any entry corresponding my service.
It seems to be the default web.xml file provided by Axis 1.3.

I did some researches on your keywords "<transport-guarantee>" and
"CONFIDENTIAL" but I could not find something usefull.

In my point of view, it will probably be the easiest way to install two
Axis-servlets in the Tomcat.
One for HTTP and one for HTTPS. Then I can deploy the services either for
HTTP or for HTTPS.

Does anyone know how I can configure my Axis servlet to only handle HTTPS
requests?
Is the difference between HTTP and HTTPS forwared from Tomcat to Axis? Does
it know it?

Regards & Many Thanks in advance


-----Ursprungliche Nachricht-----
Von: Caldarale, Charles R [mailto:Chuck.Caldarale@...]
Gesendet: Dienstag, 30. Juni 2009 19:08
An: Tomcat Users List
Betreff: RE: Service available for HTTPS only? (no HTTP)


> From: Stefan Rainer [mailto:s.rainer@...]
> Subject: Service available for HTTPS only? (no HTTP)
>
> The service XY can still be called via HTTP (without SSL).
> ==> Does anyone knows a trick to "avoid" calls via HTTP to this
> service?

Read the servlet spec, the contents of which are intentionally *not*
duplicated in the Tomcat docs.

Specifically, set a <transport-guarantee> of CONFIDENTIAL in your webapp's
WEB-INF/web.xml file.  See the servlet spec for exact details.

 - Chuck


THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY
MATERIAL and is thus for use only by the intended recipient. If you received
this in error, please contact the sender and delete the e-mail and its
attachments from all computers.


---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@...
For additional commands, e-mail: users-help@...




---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@...
For additional commands, e-mail: users-help@...

[awarnier]

Stefan Rainer wrote:
...
>
> Does anyone know how I can configure my Axis servlet to only handle HTTPS
> requests?
I think you are running around in circles here.
You already got that answer.
But you do not seem to like it, so we're kind of stuck here.



---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@...
For additional commands, e-mail: users-help@...

[Christopher Schultz-2]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Stefan,

On 7/1/2009 6:42 AM, Stefan Rainer wrote:
> In my web.xml file I don't find any entry corresponding my service.
> It seems to be the default web.xml file provided by Axis 1.3.

Post your web.xml file: it must be in there otherwise nothing will work.

> I did some researches on your keywords "<transport-guarantee>" and
> "CONFIDENTIAL" but I could not find something usefull.

Then you didn't look in the right place. Googling for
"transport-guarantee" yields a top-page chock-full of informative links.
Reading the servlet specification (honestly, a very readable document!)
is another very good resource.

The truth is out there.

- -chris

PS Apologies to Chris Carter
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAkpLWQ0ACgkQ9CaO5/Lv0PDGdgCfT1GV+Bx7UuafcYqThw7XvKHI
pFsAnRB0UNN2nJ2dHUciNMVUX1vJiEys
=Gl9B
-----END PGP SIGNATURE-----

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@...
For additional commands, e-mail: users-help@...