Hello,
Maybe someone knows docs/howtos on how to set up ssl connection? I found some info but I still couldn't configure SSL :(
I am implementing login form on JBoss 4.0 using Servlet + SSL. But when I set web resource's <transport-guarantee> attribute I am getting next error:
HTTP Status 403 - Access to the requested resource has been denied
type Status report
message Access to the requested resource has been denied
description Access to the specified resource (Access to the requested resource has been denied) has been forbidden.
Apache Tomcat/5.0.28
<web-app >
<distributable/>
<servlet>
<servlet-name>RootController</servlet-name>
<display-name>RootController</display-name>
<description>[CDATA[RootController]]</description>
<servlet-class>com.sit93.santis.sit.web.internal.RootController</servlet-class>
</servlet>
<servlet-mapping>
<servlet-name>RootController</servlet-name>
<url-pattern>/login</url-pattern>
</servlet-mapping>
<servlet-mapping>
<servlet-name>RootController</servlet-name>
<url-pattern>/*</url-pattern>
</servlet-mapping>
<security-constraint>
<web-resource-collection>
<web-resource-name>RootController</web-resource-name>
<url-pattern>/login</url-pattern>
</web-resource-collection>
<user-data-constraint>
<transport-guarantee>CONFIDENTIAL</transport-guarantee>
</user-data-constraint>
</security-constraint>
</web-app>
I also added following lines into jbossweb-tomcat50.sar/server.xml. Also I generated and put chap8.keystore file into conf directory.
<Connector port="8443" address="${jboss.bind.address}" maxThreads="100"
minSpareThreads="5" maxSpareThreads="15" scheme="https"
secure="true" clientAuth="false"
keystoreFile="${jboss.server.home.dir}/conf/chap8.keystore"
keystorePass="..." sslProtocol="TLS"/>