SSL

Enabling SSL in your app

Woko provides optional SSL support when using built-in authentication.

When turned on, the /login page (WokoLogin action bean) will check if the request is secure before displaying the login form. When a user invokes /login, a redirect is issued making sure that requests will use https://.

Once the user has switched to All subsequent requests will be done via SSL.

Configuration

You'll need to configure the SSL support in your web.xml :

    <context-param>
        <param-name>Woko.Ssl.Enabled</param-name>
        <param-value>true</param-value>
    </context-param>

    <context-param>
        <param-name>Woko.Ssl.Server.Name</param-name>
        <param-value>mydomain.com</param-value>
    </context-param>

    <context-param>
        <param-name>Woko.Ssl.Server.Port</param-name>
        <param-value>8443</param-value>
    </context-param>

Tomcat config

Here's how to configure tomcat 6 with SSL support :

http://tomcat.apache.org/tomcat-6.0-doc/ssl-howto.html