Service available for HTTPS only? (no HTTP)

[Stefan Rainer-2]

Hello!

Situation:
At the moment we are working on following environment and not able to make
any updates with the next time:
Win2000 Workstation
Tomcat 5.0.28
Axis 1.3
JDK 1.5_11

Until today we had only one HTTP connector configured in Tomcat to provide
some (Axis) SOAP Services. All of them work fine!

Target & Solution
We need to use HTTPS (SSL) for one of these services instead of HTTP.
We configured a second connector in the Tomcat und followed this
instruction: http://www.torsten-horn.de/techdocs/ssl.htm
The service XY is now available via HTTPS and it works fine!

Problem:
The service XY can still be called via HTTP (without SSL).
==> Does anyone knows a trick to "avoid" calls via HTTP to this service?
We can not remove the HTTP connector because some other services on this
server have to be available with HTTP.

Many thanks in advance,
Stefan



---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@...
For additional commands, e-mail: users-help@...

[Caldarale, Charles R]

> From: Stefan Rainer [mailto:s.rainer@...]
> Subject: Service available for HTTPS only? (no HTTP)
>
> The service XY can still be called via HTTP (without SSL).
> ==> Does anyone knows a trick to "avoid" calls via HTTP to this
> service?

Read the servlet spec, the contents of which are intentionally *not* duplicated in the Tomcat docs.

Specifically, set a <transport-guarantee> of CONFIDENTIAL in your webapp's WEB-INF/web.xml file.  See the servlet spec for exact details.

 - Chuck


THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY MATERIAL and is thus for use only by the intended recipient. If you received this in error, please contact the sender and delete the e-mail and its attachments from all computers.


---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@...
For additional commands, e-mail: users-help@...