I have been trying to find a way of easily telling if a Java Server has SSL enabled from JSP to redirect a single page. My reasoning for this is that I only want to forward to SSL if it is enabled making it easy to test in our local dev systems without having to set up the certificates and then deploy to our release system and have the certificates just “work.”
I have looked at attempting to create a SslSocketFactory and seeing if it works without an exception being thrown, but this doesn’t appear to work as I thought. I do not particularly like this method however since I have to spend the time createing the factory to only throw it away. I’m really just looking for a public boolean isSslEnabled() method call that I can use.
Currently what we have is that the default state is to not use HTTPS, but when on the release system you can access the site via HTTPS. This isn’t ideal since a user could still access the site over HTTP and everything would then be sent in the clear. I’m also not looking to encrypt the whole server, just a single page if SSL is enabled.
Your Java code shouldnt be concerned whether SSL is enabled or not. Try to leave his to configuration only.
If you have setup your SSL requirements inside your web.xml, then your developers can override their local web.xml for their local server requirements (eg eclipse).
If your concerned about SSL for you per-production servers its best to create your own Certificate Authority and generate your own SSL certificates. This so that you can deploy the exact same EAR or WAR to pre-prod and production environments. You don’t want to fiddle you deployment per environment.
Jboss SSL config
Tomcat SSL config