What I don't understand: in an earlier posting you wrote:
On 5/29/06, Josip Gracin <[EMAIL PROTECTED]> wrote: [...]
scheme, but relying only on Tapestry mechanisms, i.e. not using Tomcat etc.?
[...] Why would you not want to use an external mechanism? Is it not rather a feature of the framework to be "SSL agnostic"? I think more often than not people would keep, for example, security and access right aspects out of the application and deal with it declaratively. Now you're looking for a way to move http/https - switching into your application? Well, anyway: with Apache httpd, what you try to achieve is often done by using mod_rewrite. For https-only pages, the protocol part can be rewritten to https if the page is accessed via http, and vice versa. If the URL rewrite filter ("http://tuckey.org/urlrewrite/") does what it aspires (to be a very powerful tool just like Apache's mod_rewrite), it should allow you to do the same in a more portable way. Talking about apache: including external content on https sites via http can in many cases be done without triggering warnings, by making a directory on your https server a reverse proxy using mod_proxy. hth, Lutz --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]