0 Replies Latest reply on Nov 27, 2002 12:29 AM by ganton516

    Separation of SSL & Non-SSL Apps

      I seem to be having trouble making JBoss-3.0.4/Jetty, enforce a virtual-host.

      The issue is simple, I have the following apps

      /public
      /secure

      /public is hosted on port 8080, NO VIRTUAL-HOST directive in jboss-web.xml

      /secure is hosted on port 8443,
      <virtual-host>localhost:8443</virtual-host>

      The issue is that if I issue the following GET
      http://localhost:8080/secure/index.jsp

      It takes me there, and I don't want that to happen because:

      A: They are not using SSL
      B: It's on the wrong port

      I have
      <user-data-constraint>
      <transport-guarantee>CONFIDENTIAL</transport-guarantee>
      </user-data-constraint>

      in the application deployment descriptor for the /secure app


      ANY help with this will be GREATLY appreciated


      Thanks in advance G