making project strictly use HTTPS , and deny and redirect HTTP urls to HTTPS.

[nav...@senspan.com]

I have made a project that can Run on HTTPS but now I want it to use only HTTPS not HTTP , 

my project is in java and i used eclipse in development , 

I found out that we need to redirect all request and make changes in Httpd's configuration file  and remove listen port 80 , from that file ,

 but i was not able to find these configurations files.

please suggest me how to make site strictly HTTPS. 

   

[Alex Martelli]

On Wed, Jun 24, 2015 at 9:17 AM, <nav...@senspan.com> wrote:

I have made a project that can Run on HTTPS but now I want it to use only HTTPS not HTTP , 

my project is in java and i used eclipse in development , 

I found out that we need to redirect all request and make changes in Httpd's configuration file  and remove listen port 80 , from that file ,

 but i was not able to find these configurations files.

Indeed, App Engine does not use those configuration files, but its own ones.

 

please suggest me how to make site strictly HTTPS. 

See https://cloud.google.com/appengine/docs/java/config/webxml#Secure_URLs -- i.e if you're running as *.appspot.com, all you need to do is to use the deployment descriptor to set the desired URL pattern to "CONFIDENTIAL" (if you're running as your own domain, follow the link in that page for further information). 

Alex

   

--
You received this message because you are subscribed to the Google Groups "Google App Engine" group.
To unsubscribe from this group and stop receiving emails from it, send an email to google-appengi...@googlegroups.com.
To post to this group, send email to google-a...@googlegroups.com.
Visit this group at http://groups.google.com/group/google-appengine.
To view this discussion on the web visit https://groups.google.com/d/msgid/google-appengine/0b5b5394-c696-4d79-9262-678b23c58bb5%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[nav...@senspan.com]

thanks a lot , it was simple and perfect :)

[Hristo]

I think you can just set the "secure" parameter in app.yaml:

https://cloud.google.com/appengine/docs/java/configyaml/appconfig_yaml#Java_app_yaml_Secure_URLs

- Hristo

[Alex Martelli]

On Wed, Jun 24, 2015 at 11:59 AM, Hristo <hristo...@gmail.com> wrote:

I think you can just set the "secure" parameter in app.yaml:

That's a perfectly acceptable alternative, too, but many prefer their Java GAE configs to be in XML, so that's what I suggested instead (since the task can be accomplished either way).

Personally I love yaml more than XML, but, that's just my own individual taste, not an "official" statement of any kind -- so, anyway, thanks for also surfacing this alternative!

Alex

--

You received this message because you are subscribed to the Google Groups "Google App Engine" group.
To unsubscribe from this group and stop receiving emails from it, send an email to google-appengi...@googlegroups.com.
To post to this group, send email to google-a...@googlegroups.com.
Visit this group at http://groups.google.com/group/google-appengine.

To view this discussion on the web visit https://groups.google.com/d/msgid/google-appengine/2f833ca4-6068-4118-8612-e03e896f203c%40googlegroups.com.