https connection doesn't close java EE -
hello developoing java ee project want have https connection @ registration pages. configured editing server.xml file accordingly tutorials found , works fine. problem won't close. if open page https triggered pages opened after https instead of http? normal way https behaved or doing wrong?
heres's content related server.xml:
<connector sslenabled="true" clientauth="false" keystorefile="c:\users\mario\.keystore" keystorepass="123456" maxthreads="150" port="8443" protocol="http/1.1" scheme="https" secure="true" sslprotocol="tls"/>
and here web.xml of project
<security-constraint> <web-resource-collection> <web-resource-name>viewpoint secure urls</web-resource-name> <url-pattern>/user/*</url-pattern> </web-resource-collection> <user-data-constraint> <transport-guarantee>confidential</transport-guarantee> </user-data-constraint> </security-constraint> <servlet>
the pages under "user" directory opened https every other page of project opened https index.xhtml located level above user folder.
thx in advance!
from the documentation:
servletsecurity.transportguarantee confidential
all user data must encrypted transport (typically using ssl/tls).
it might case server sets strict-transport-security
header enforce "all user data" constraint.
Comments
Post a Comment