How to create a new user over HTTPS

Question

Hi. I have set up conf.xml and web.xml so that when the user accesses a page in the secure area of the website, then they are taken to a login page where they enter their username and password and the form calls j_security_check on the server. All this happens over SSL as the transport garauntee is CONFIDENTIAL. But how to create a new user over HTTPS? If I have a create new account pages in the secure area of the website, then the only way the user can access these pages is by logging in, but they don't have a login as yet.

Answer 1

An update. It looks that if the auth-constraint section (which lists the roles that can access this area) is missing, then everyone can access the region and it is over HTTPS. So far, the following seems to be working
   <security-constraint>
      <display-name>View My Account</display-name>
      <web-resource-collection>
         <web-resource-name>My Account Area</web-resource-name>
         <url-pattern>/myaccount/*</url-pattern>
      </web-resource-collection>
      <auth-constraint>
         <role-name>myrole</role-name>
      </auth-constraint>
      <user-data-constraint>
         <transport-guarantee>CONFIDENTIAL</transport-guarantee>
      </user-data-constraint>
   </security-constraint>
   <login-config>
      <auth-method>FORM</auth-method>
      <realm-name>Form-Based Authentication Area</realm-name>
      <form-login-config>
         <form-login-page>/newaccount/login.html</form-login-page>
         <form-error-page>/newaccount/loginerr.html</form-error-page>
      </form-login-config>
   </login-config>
   <security-role>
      <role-name>myrole</role-name>
   </security-role>
   <security-constraint>
      <display-name>Create New Account</display-name>
      <web-resource-collection>
         <web-resource-name>New Account Area</web-resource-name>
         <url-pattern>/newaccount/*</url-pattern>
      </web-resource-collection>
      <user-data-constraint>
         <transport-guarantee>CONFIDENTIAL</transport-guarantee>
      </user-data-constraint>
   </security-constraint>