[Struts] Using HTTPS

[bort]

Hi all

How do I go about submitting actions securely using https? Currently, in my
<form> tags I have something similar to this:

<html:form name="MyForm" type="com.forms.MyForm" action="/ProcessThis">

but when I do this:

<html:form name="MyForm" type="com.forms.MyForm"
action="https://www.domain.com/ProcessThis">

I get JSP compilation errors.

Help!

bort

 

[Sudsy]

Hi all

How do I go about submitting actions securely using https? Currently, in my
<form> tags I have something similar to this:

<html:form name="MyForm" type="com.forms.MyForm" action="/ProcessThis">

but when I do this:

<html:form name="MyForm" type="com.forms.MyForm"
action="https://www.domain.com/ProcessThis">

I get JSP compilation errors.

I do it differently. I specify the protocol in the path attribute of the
forward element nested within the action element in struts-config.xml.
Works just fine.

 

[Sudsy]

I do it differently. I specify the protocol in the path attribute of the
forward element nested within the action element in struts-config.xml.
Works just fine.

Perhaps I need to clarify. If I'm in a "sensitive" area of a website
then I like to see visual confirmation at the time the form is
presented. I don't want to have to "View source" in order to determine
that the submission will be handled by SSL. I want to see the padlock
locked and yellow (in Netscape).
So I redirect to a form which is generated by the secure section of
the site via a previous ActionForward. The beauty of this approach is
that all references from that point forward don't require the
specification of HTTPS protocol, i.e. they're just regular action
paths.
I only need to specify the protocol again when I'm reverting to the
insecure areas of the site.
Does this make sense? Drop me a note off-list if you need further
details.

 

[bort]

Sudsy

Check your email.

bort

Perhaps I need to clarify. If I'm in a "sensitive" area of a website
then I like to see visual confirmation at the time the form is
presented. I don't want to have to "View source" in order to determine
that the submission will be handled by SSL. I want to see the padlock
locked and yellow (in Netscape).
So I redirect to a form which is generated by the secure section of
the site via a previous ActionForward. The beauty of this approach is
that all references from that point forward don't require the
specification of HTTPS protocol, i.e. they're just regular action
paths.
I only need to specify the protocol again when I'm reverting to the
insecure areas of the site.
Does this make sense? Drop me a note off-list if you need further
details.