Wiki source code of Web Applications-Development-SSL
Version 36.1 by Pascal Robert on 2007/09/03 15:13
Show last authors
author | version | line-number | content |
---|---|---|---|
1 | == Detecting SSL == | ||
2 | |||
3 | Code for detecting whether SSL is active for the current request: | ||
4 | I'm told this won't work with IIS: | ||
5 | |||
6 | {{code}} | ||
7 | |||
8 | // Is this page being accessed securely? | ||
9 | boolean secureMode = false; | ||
10 | String header = context.request().headerForKey("https"); | ||
11 | if( header == null ) { | ||
12 | log.debug( "no https header, looking for server_port" ); | ||
13 | header = context.request().headerForKey( "server_port" ); | ||
14 | if( header == null ) { | ||
15 | log.debug( "no server_port header found, assuming insecure connection" ); | ||
16 | } else { | ||
17 | log.debug( "server_port header found, using it" ); | ||
18 | secureMode = header.equals( "443" ); | ||
19 | } | ||
20 | } else { | ||
21 | log.debug( "https header found, using it" ); | ||
22 | secureMode = header.equals( "on" ); | ||
23 | } | ||
24 | log.debug( "secure mode set to " + secureMode ); | ||
25 | |||
26 | {{/code}} |