Re: WebObjects and HTTPS
Re: WebObjects and HTTPS
- Subject: Re: WebObjects and HTTPS
- From: Simon McLean <email@hidden>
- Date: Thu, 30 Jul 2009 18:46:39 +0100
i think the easiest way to think of it is that the "s" bit all happens
between the client's browser and apache. WO sit's behind apache and
therefore doesn't really give a monkeys about whether the
communication with the client is secure or not.
regarding the app switching etc. nothing happens automatically by
default (in our apps we have specified pages that switch to SSL
automagically but it's all handled in our code). you'll need to make
the link to the form's page connect of SSL. so for example if you are
using a WOHYperlink that a user clicks to get to the SSL form then add
a "secure='$true'" binding and WO will render the link as https://....
rather than http://...
yes you do need port 443 if you are running secure on that port (it's
configurable in apache, 443 is the default)
also, don't forget to ensure that any references on the secure form
are also to secure url's (eg image src tags) to avoid the dreaded
"mixed content" warnings for IE users...
simon
2009/7/30 David Holt <email@hidden>:
> Hi all,
>
> We have been asked to implement a secure form for a client. The wiki page on
> using HTTPS with WebObjects implies that you don't need to set anything in
> Apache for your site as a whole in order to use SSL in a particular WO
> application. Can anyone confirm that all I need to do is follow the example
> on the wiki and/or Practical WebObjects and the app will switch to HTTPS
> when called from a hyperlink or WOForm submission? Do I need to enable port
> 443 on the server for the site as well?
>
> http://wiki.objectstyle.org/confluence/display/WO/Web+Applications-Development-SSL+requests+via+https+protocol
>
> Thanks,
>
> David
> _______________________________________________
> Do not post admin requests to the list. They will be ignored.
> Webobjects-dev mailing list (email@hidden)
> Help/Unsubscribe/Update your Subscription:
>
> This email sent to email@hidden
>
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Webobjects-dev mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
This email sent to email@hidden