Question

I configure my web application to use SSL using my own self signed certificate. Everything is working fine but here my whole site is https now as i used :-

<transport-guarantee>CONFIDENTIAL</transport-guarantee>

However, i only want my login page to use SSL and not complete site. What changes do i need to make in my application?

Thanks in advance 🙂

Answer 1

• let all links be regular
• let the link to the login page be https://...
• on the login page make sure all links are http://

For example:

<a href="https://<%= request.getServerName() %>/login.jsp">

(you many need to also include request.getServletContext().getContextPath() as well)