Forum:

Servlets

Redirecting to HTTPS

Nelo Angelo

Ranch Hand

Posts: 44

I like...

posted 12 years ago

Number of slices to send:

Optional 'thank-you' note:

Send

Hello everyone,

I am trying to create an example that uses HTTPS connection. I have successfully configured a custom certificate following the steps given in Tomcat 6.0 documentation. A https://localhost:8443/ successfully opens the Tomcat index page.

I am unable to configure a page/servlet to open in HTTPS. Would anyone please suggest me the steps to configure a webapp to automatically redirect itself into a HTTPS connection.

I love java but she hates me... :'(

Nelo Angelo

Ranch Hand

Posts: 44

I like...

posted 12 years ago

Number of slices to send:

Optional 'thank-you' note:

Send

Here's the example I'm trying...

usingHttpsForm.html

UsingHttpsServlet.java

package com.example.web;

import java.io.IOException;
import javax.servlet.ServletException;
import javax.servlet.http.HttpServlet;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;

/**
 * Servlet implementation class UsingHttpsServlet
 */
public class UsingHttpsServlet extends HttpServlet {
	private static final long serialVersionUID = 1L;
       
    /**
     * @see HttpServlet#HttpServlet()
     */
    public UsingHttpsServlet() {
        super();
        // TODO Auto-generated constructor stub
    }

/**
	 * @see HttpServlet#doGet(HttpServletRequest request, HttpServletResponse response)
	 */
	protected void doGet(HttpServletRequest request, HttpServletResponse response) throws ServletException, IOException {
		// TODO Auto-generated method stub
	}

/**
	 * @see HttpServlet#doPost(HttpServletRequest request, HttpServletResponse response)
	 */
	protected void doPost(HttpServletRequest request, HttpServletResponse response) throws ServletException, IOException {
		String name=request.getParameter("userName");
		String pass=request.getParameter("userPassword");
		
		if(name.equals(pass)){
			response.sendRedirect("Success.jsp");
		}
		else{
			response.sendRedirect("usingHttpsForm.html");
		}
	}

}

web.xml

<?xml version="1.0" encoding="UTF-8"?>
<web-app xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns="http://java.sun.com/xml/ns/javaee" xmlns:web="http://java.sun.com/xml/ns/javaee/web-app_2_5.xsd" xsi:schemaLocation="http://java.sun.com/xml/ns/javaee http://java.sun.com/xml/ns/javaee/web-app_2_5.xsd" id="WebApp_ID" version="2.5">
  <display-name>UsingHTTPS</display-name>
  <welcome-file-list>
    <welcome-file>usingHttpsForm.html</welcome-file>
    <welcome-file>index.htm</welcome-file>
    <welcome-file>index.jsp</welcome-file>
    <welcome-file>default.html</welcome-file>
    <welcome-file>default.htm</welcome-file>
    <welcome-file>default.jsp</welcome-file>
  </welcome-file-list>
  <servlet>
    <description></description>
    <display-name>UsingHttpsServlet</display-name>
    <servlet-name>UsingHttpsServlet</servlet-name>
    <servlet-class>com.example.web.UsingHttpsServlet</servlet-class>
  </servlet>
  <servlet-mapping>
    <servlet-name>UsingHttpsServlet</servlet-name>
    <url-pattern>/usinghttpsservlet</url-pattern>
  </servlet-mapping>
  
  <security-constraint>
  <web-resource-collection>
    <web-resource-name>Restricted URLs</web-resource-name>
    <url-pattern>/*</url-pattern>
    <http-method>GET</http-method>
    <http-method>POST</http-method>
  </web-resource-collection>
  <user-data-constraint>
    <transport-guarantee>CONFIDENTIAL</transport-guarantee>
  </user-data-constraint>
</security-constraint>
</web-app>

=======
Error:
=======

I get a Page Cannot be Displayed while running the web-app or executing usingHttpsForm.html.

=========
SCREENS
=========

1.jpg

2.jpg

I love java but she hates me... :'(

Ankush Kaundal

Ranch Hand

Posts: 36

I like...

posted 12 years ago

Number of slices to send:

Optional 'thank-you' note:

Send

Have you configured your server.xml to allow the application to run using HTTPS??
and also you have to give keystore and keypass attributes in server.xml.

Nelo Angelo

Ranch Hand

Posts: 44

I like...

posted 12 years ago

Number of slices to send:

Optional 'thank-you' note:

Send

Hi,

Thanks for the reply. Yes, I have successfully configured SSL in Tomcat and all the necessary changes to the server.xml have been done.
Here's the copy of my server.xml document..

server.xml

<?xml version='1.0' encoding='utf-8'?>
<!--
  Licensed to the Apache Software Foundation (ASF) under one or more
  contributor license agreements.  See the NOTICE file distributed with
  this work for additional information regarding copyright ownership.
  The ASF licenses this file to You under the Apache License, Version 2.0
  (the "License"); you may not use this file except in compliance with
  the License.  You may obtain a copy of the License at

http://www.apache.org/licenses/LICENSE-2.0

Unless required by applicable law or agreed to in writing, software
  distributed under the License is distributed on an "AS IS" BASIS,
  WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
  See the License for the specific language governing permissions and
  limitations under the License.
-->

<Server port="8006" shutdown="SHUTDOWN">

<Listener className="org.apache.catalina.core.AprLifecycleListener" SSLEngine="on" />
  
  <Listener className="org.apache.catalina.core.JasperListener" />
  
  <Listener className="org.apache.catalina.core.JreMemoryLeakPreventionListener" />
  
  <Listener className="org.apache.catalina.mbeans.ServerLifecycleListener" />
  <Listener className="org.apache.catalina.mbeans.GlobalResourcesLifecycleListener" />

<GlobalNamingResources>
    
    <Resource name="UserDatabase" auth="Container"
              type="org.apache.catalina.UserDatabase"
              description="User database that can be updated and saved"
              factory="org.apache.catalina.users.MemoryUserDatabaseFactory"
              pathname="conf/tomcat-users.xml" />
  </GlobalNamingResources>

<Service name="Catalina">
  
    
    
    
    
    
    <Connector port="8054" protocol="HTTP/1.1" 
               connectionTimeout="20000" 
               redirectPort="8443" />
    
               
	
	
    
    
    <Connector port="8443" protocol="HTTP/1.1" SSLEnabled="true"
               maxThreads="150" scheme="https" secure="true"
			   keystoreFile="${user.home}/.keystore" keystorePass="changeit"
               clientAuth="false" sslProtocol="TLS" />

<Connector port="8009" protocol="AJP/1.3" redirectPort="8443" />

<Engine name="Catalina" defaultHost="localhost">

<Realm className="org.apache.catalina.realm.UserDatabaseRealm"
             resourceName="UserDatabase"/>

<Host name="localhost"  appBase="webapps"
            unpackWARs="true" autoDeploy="true"
            xmlValidation="false" xmlNamespaceAware="false">

</Host>
    </Engine>
  </Service>
</Server>

I love java but she hates me... :'(

Ankush Kaundal

Ranch Hand

Posts: 36

I like...

posted 12 years ago

Number of slices to send:

Optional 'thank-you' note:

Send

I think in this case the server is not picking up the path of the keystore file, maybe you can put the file in some other location on your hard drive and try giving the absolute path.

Nelo Angelo

Ranch Hand

Posts: 44

I like...

posted 12 years ago

Number of slices to send:

Optional 'thank-you' note:

Send

Thanks for the reply.

The problem is now resolved. I created another server in Eclipse and it copied the server.xml of Tomcat!!! So, finally, SSL working with Eclipse. Thanks again for the replies.

I love java but she hates me... :'(

It's feeding time! Give me the food you were going to give to this tiny ad:

We need your help - Coderanch server fundraiser

https://coderanch.com/wiki/782867/Coderanch-server-fundraiser