How To Require SSL?
24208Dec 19 2003 — edited Mar 21 2006Since user id's and passwords are sent as clear text from the client browser to html db, I am attempting to force https/ssl. So far I have:
- Created a Certificate Authority
- Created a Certificate Signing Request
- Self-Signed the Certificate
- Deployed the signed certificate to the Oracle http server
I can access the server via https and get prompted for the certificate, etc. as I expect. However, I want to be able to FORCE the https protocol with the html db "directories". The SSLRequireSSL Apache directive seems to work only for physical filesystem directories. Is that truly the case? Any suggestions?
Thanks,
Mark