I am trying to force a connection to
The site works correctly if they go to
https://localhost:8443. In case the user forgets the s in https I would like tomcat to correct it for them.
I only have one connector for https, defined as:
<Connector port="8443" rediretPort="8443" protocol="HTTP/1.1" connectionTimeout="20000" SSLEnabled="true" maxThreads="150" scheme="https" secure="true" clientAuth="false" sslProtocol="TLS" keyAlias="alias" keystoreFile="keystore.jks" keypass="PASSWORD" />
This is on a Windows server. Tomcat 6 is a standalone server (not connected to IIS).
I have tried to modify web.xml to include the following:
<security-constraint> <web-resource-collection> <web-resource-name>Protected Context</web-resource-name> <url-pattern>/*</url-pattern> </web-resource-collection> <user-data-constraint> <transport-guarantee>CONFIDENTIAL</transport-guarantee> </user-data-constraint>
This does not work for me. From what I have read, this would redirect a user from
https://localhost:8443 (if the connector 8080 defined the redirectPort as 8443).
I am not sure this is even possible with a standalone Tomcat server. I know this is possible with apache mod_rewrite or some other similar solution, but I do not want to install any other service on the Windows machine.