Thanks for the pointer on the definition of tls...
I still have to wonder how many folks will make the mistake of using
'https' instead of 'tls', though...
It seems like more folks "understand" the relationship between http and
https than between http and tls...
Rejecting https and telling the user 'hey, didn't you mean tls?' seems
like it will just be a frustrating user experience.
vbk
Peter Williams wrote:
> For a definition of TLS, see
> http://en.wikipedia.org/wiki/Secure_Sockets_Layer
>
> -Peter
>
> vince kraemer wrote:
>> What is tls?
>>
>> Why wouldn't we want to accept https as well as tls in this situation?
>>
>> vbk
>>
>> Jeanfrancois Arcand wrote:
>>> Hi,
>>>
>>> thanks to Nandini who find the problem, here is a small correction.
>>> If you want (at your own risk) to support https->http redirection,
>>> you need to add:
>>>
>>> <property name="proxiedProtocols" value="tls"/>
>>>
>>> *not* https. tls is the right value. I've added a log message when a
>>> wrong value is specified because before nothing was logged, which is
>>> confusing.
>>>
>>> Thanks
>>>
>>> -- Jeanfrancois
>>>
>>>
>>
>> ---------------------------------------------------------------------
>> To unsubscribe, e-mail: dev-unsubscribe_at_glassfish.dev.java.net
>> For additional commands, e-mail: dev-help_at_glassfish.dev.java.net
>>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: dev-unsubscribe_at_glassfish.dev.java.net
> For additional commands, e-mail: dev-help_at_glassfish.dev.java.net
>