dcsimg

Automatically redirect on SSL port?

Created May 7, 2012

Rodney Russ

The Servlet 2.3 specification states (12.8 Specifying Security Constraints):

[...] In most cases, the presence of the INTEGRAL or CONFIDENTIAL flag will indicate that the use of SSL is required. [...]

The solution is to create a <transport-guarantee element> in a <user-data-constraint> element. Example: 
<user-data-constraint>
  <transport-guarantee>
    CONFIDENTIAL
  </transport-guarantee>
</user-data-constraint>