blocks|key|3888450|text|可以在应用程序中而不是在服务器配置中执行此操作的一种方法是使用Filter+(在web.xml中指定)检查ServletRequest.getScheme()是"http“还是"https"，并将用户重定向到适当的Filter(使用HttpServletResponse.sendRedirect(String+url))。|type|unstyled|depth|inlineStyleRanges|offset|length|style|CODE|entityRanges|data|3888451|entityMap|0|LINK|mutability|MUTABLE|url|http://java.sun.com/j2ee/1.4/docs/api/javax/servlet/Filter.html|1^0|1H|Q|38|18|V|6|0|2Z|6|1|0^^$0|@$1|2|3|4|5|6|7|O|8|@$9|P|A|Q|B|C]|$9|R|A|S|B|C]]|D|@$9|T|A|U|1|V]|$9|W|A|X|1|Y]]|E|$]]|$1|F|3|-4|5|6|7|Z|8|@]|D|@]|E|$]]]|G|$H|$5|I|J|K|E|$L|M]]|N|$5|I|J|K|E|$L|M]]]]

One way that you could do this within your application rather than in the server configuration would be to use a <a href="http://java.sun.com/j2ee/1.4/docs/api/javax/servlet/Filter.html" rel="nofollow noreferrer">Filter</a> (specified in your web.xml) to check if <code>ServletRequest.getScheme()</code> is "http" or "https", and re-direct the user to the appropriate URL (using <code>HttpServletResponse.sendRedirect(String url)</code>).

blocks|key|5299420|text|您可以在web.xml中添加以下条目，它将确保所有请求都转换为https|type|unstyled|depth|inlineStyleRanges|entityRanges|data|5299421|
+++<security-constraint>
+++++++<web-resource-collection>
+++++++++++<web-resource-name>SSL</web-resource-name>
+++++++++++<url-pattern>/*</url-pattern>
+++++++</web-resource-collection>
+++++++<user-data-constraint>
+++++++++++<transport-guarantee>CONFIDENTIAL</transport-guarantee>
+++++++</user-data-constraint>
+++</security-constraint>

|code-block|syntax|javascript|5299422|entityMap^0|0|0^^$0|@$1|2|3|4|5|6|7|I|8|@]|9|@]|A|$]]|$1|B|3|C|5|D|7|J|8|@]|9|@]|A|$E|F]]|$1|G|3|-4|5|6|7|K|8|@]|9|@]|A|$]]]|H|$]]

You can add the following entry in your web.xml and it will make sure all requests are converted to https

<pre><code>&lt;!--********************************
 *** SSL Security Constraint ***
 *****************************--&gt;
 &lt;security-constraint&gt;
 &lt;web-resource-collection&gt;
 &lt;web-resource-name&gt;SSL&lt;/web-resource-name&gt;
 &lt;url-pattern&gt;/*&lt;/url-pattern&gt;
 &lt;/web-resource-collection&gt;
 &lt;user-data-constraint&gt;
 &lt;transport-guarantee&gt;CONFIDENTIAL&lt;/transport-guarantee&gt;
 &lt;/user-data-constraint&gt;
 &lt;/security-constraint&gt;

&lt;!--********************************* --&gt;
</code></pre>

blocks|key|774866|text|Websphere不是一个完整的http服务器。它确实有“传输链”，它的作用类似于HTTP服务器。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|774867|通常情况下，您会将HTTP服务器放在前面。IBM提供了IHS+(IBM+HTTP+Server)，它是一种经过轻微修改的Apache+HTTP+Server。使用httpd.conf文件配置HTTP服务器。在这里，您可以添加重定向，以使对http的请求被重定向到https。|774868|也许你可以提供一些关于你的基础设施的详细信息。|774869|entityMap^0|0|0|0^^$0|@$1|2|3|4|5|6|7|H|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|I|8|@]|9|@]|A|$]]|$1|D|3|E|5|6|7|J|8|@]|9|@]|A|$]]|$1|F|3|-4|5|6|7|K|8|@]|9|@]|A|$]]]|G|$]]

Websphere is not a complete http server. It does have 'Transport Chains', which act like an HTTP Server.

Normally you will put a HTTP server in front. IBM provides IHS (IBM HTTP Server) which is a lightly modified Apache HTTP Server. The HTTP Server is configured with the httpd.conf file. There you add redirects in such a way that request for http are redirected to https.

Maybe you can give some detailed information about your infrastructure.

blocks|key|5299253|text|我同意。我认为使用过滤器可以实现这一点。这是我为负载均衡和端口重定向编写的过滤器，但它应该很容易弄清楚如何编辑它以满足您的需求。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|5299254|公共类RequestWrapperFilter实现筛选器{|5299255|public+void+doFilter(ServletRequest+servletRequest,
++++++++ServletResponse+servletResponse,+FilterChain+filterChain)
++++++++throws+IOException,+ServletException+{

++++HttpServletRequest+httpRequest+=+(HttpServletRequest)+servletRequest;
++++HttpServletResponse+httpResponse+=+(HttpServletResponse)+servletResponse;

++++String+requestWrapperClassName+=+(String)+(httpRequest
++++++++++++.getAttribute(LoadBalancerRequestWrapper.class.getName()));

++++String+initiatingServerName+=+httpRequest.getServerName();

++++if+(requestWrapperClassName+==+null
++++++++++++&&+initiatingServerName.equals(loadBalancerHostName))+{

++++++++httpRequest+=+new+LoadBalancerRequestWrapper(AuthenticationUtil
++++++++++++++++.getHttpServletRequest(httpRequest));
++++}

++++filterChain.doFilter(httpRequest,+httpResponse);
}|code-block|syntax|javascript|5299256|}|5299257|/**
+*+The+custom+implementation+of+the+request+wrapper.+It+simply+overrides+the
+*+getScheme()+and+getServerPort()+methods+to+perform+the+redirect
+*+filtering.
+*+
+*+
+*/
private+static+class+LoadBalancerRequestWrapper+extends
++++++++HttpServletRequestWrapper+{

++++/**
+++++*+Default+Constructor.+Simply+declares+the+Wrapper+as+injected.
+++++*+
+++++*+@param+httpServletRequest
+++++*++++++++++++the+app-server+HttpServletRequest.
+++++*+
+++++*/
++++public+LoadBalancerRequestWrapper(HttpServletRequest+httpServletRequest)+{
++++++++super(httpServletRequest);
++++}

++++/**
+++++*+The+overridden+scheme.
+++++*+
+++++*/
++++public+final+String+getScheme()+{
++++++++if+(loadBalancerHttpScheme.equals(EMPTY_STRING))+{
++++++++++++return+super.getScheme();
++++++++}

++++++++return+loadBalancerHttpScheme;
++++}
}|5299258|5299259|entityMap^0|0|0|0|0|0|0^^$0|@$1|2|3|4|5|6|7|P|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|Q|8|@]|9|@]|A|$]]|$1|D|3|E|5|F|7|R|8|@]|9|@]|A|$G|H]]|$1|I|3|J|5|6|7|S|8|@]|9|@]|A|$]]|$1|K|3|L|5|F|7|T|8|@]|9|@]|A|$G|H]]|$1|M|3|J|5|6|7|U|8|@]|9|@]|A|$]]|$1|N|3|-4|5|6|7|V|8|@]|9|@]|A|$]]]|O|$]]

I agree. I think using a Filter will achieve this. Here is a Filter I wrote for load balancing and port redirection but it should be easy to figure out how to edit it to fit your needs.

public class RequestWrapperFilter implements Filter {

<pre><code>public void doFilter(ServletRequest servletRequest,
 ServletResponse servletResponse, FilterChain filterChain)
 throws IOException, ServletException {

 HttpServletRequest httpRequest = (HttpServletRequest) servletRequest;
 HttpServletResponse httpResponse = (HttpServletResponse) servletResponse;

 String requestWrapperClassName = (String) (httpRequest
 .getAttribute(LoadBalancerRequestWrapper.class.getName()));

 String initiatingServerName = httpRequest.getServerName();

 if (requestWrapperClassName == null
 &amp;&amp; initiatingServerName.equals(loadBalancerHostName)) {

 httpRequest = new LoadBalancerRequestWrapper(AuthenticationUtil
 .getHttpServletRequest(httpRequest));
 }

 filterChain.doFilter(httpRequest, httpResponse);
}
</code></pre>

}

<pre><code>/**
 * The custom implementation of the request wrapper. It simply overrides the
 * getScheme() and getServerPort() methods to perform the redirect
 * filtering.
 * 
 * 
 */
private static class LoadBalancerRequestWrapper extends
 HttpServletRequestWrapper {

 /**
 * Default Constructor. Simply declares the Wrapper as injected.
 * 
 * @param httpServletRequest
 * the app-server HttpServletRequest.
 * 
 */
 public LoadBalancerRequestWrapper(HttpServletRequest httpServletRequest) {
 super(httpServletRequest);
 }

 /**
 * The overridden scheme.
 * 
 */
 public final String getScheme() {
 if (loadBalancerHttpScheme.equals(EMPTY_STRING)) {
 return super.getScheme();
 }

 return loadBalancerHttpScheme;
 }
}
</code></pre>

}

I was wondering how i can force a user who has requested a page using Http to use the secure https version?

I am using Websphere 6.1 as my application server and Rad 7 as my development environment

Thanks
Damien

Force Https in Websphere 6.1

翻译质量差，导致语言生硬或混乱。

没有提供实际的解决方法或示例。

解答不清晰，无法理解或解决问题。

页面排版不美观，阅读体验差。

文章

问答

视频

学习中心

腾讯云实验室

直播

竞赛

腾讯云代码分析专区

腾讯iOA零信任安全管理系统专区

腾讯云架构师技术同盟交流圈

腾讯云数据库专区

腾讯云顾问专区

腾讯云原生专区

腾讯混元专区

腾讯云TCE专区

腾讯云Lighthouse专区

腾讯云HAI专区

腾讯云Edgeone专区

腾讯云存储专区

腾讯云智能专区

腾讯轻联专区 

腾讯云开发专区

TAPD专区

腾讯轻量云游戏服专区

腾讯云最具价值专家

腾讯云架构师技术同盟

腾讯云创作之星

腾讯云开发者先锋

腾讯云代码助手

云原生构建

TAPD 敏捷项目管理

Cloud Studio

SDK中心

API中心

命令行工具

涵盖代码开发、场景应用、自动测试全流程，助你从零构建专属AI助手

一站式MCP教程库，解锁AI应用新玩法

我想知道如何强制使用Http请求页面的用户使用安全https版本？我使用Websphere 6.1作为应用服务器，使用Rad 7作为开发环境谢谢达米恩

问在Websphere 6.1中强制使用Https
EN

回答 4

Stack Overflow用户

Stack Overflow用户

Stack Overflow用户

社区

活动

圈层

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问在Websphere 6.1中强制使用HttpsEN

回答 4

Stack Overflow用户

Stack Overflow用户

Stack Overflow用户

社区

活动

圈层

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问在Websphere 6.1中强制使用Https
EN