Disable http - use only https

dear all,
i have created a self sign certificate on my oracle application server and enables ssl on port 443.
how can i disable the http service as i inly want users to access https://myportal/ instead of using http://myportal as well
thank you in advance for your assistance

To make a single application available over two protocols in standalone OC4J, that application must be declared in two different Web site XML files, and marked as "shared". This feature is enabled if the shared attribute of the <web-app> element in each Web site XML file is set to "true". Setting an application as shared makes a single application deployment available over the protocols defined for each Web site it is declared within. To share between HTTP and HTTPS, one Web site would be secured, configured for HTTPS, and the other would be not secured, configured for HTTP...
This is wat i got from this site..
http://database.in2p3.fr/doc/oracle/Oracle_Application_Server_10_Release_3/web.1013/b28959/sessions.htm
So setting that attribute to false may be of help to you...
Think this info is somewat useful...
Regards
~RK

Similar Messages

Accssing web applcation in weblogic server using only https

There was a demo certificate that comes with the weblogic. I installed that certificate,
but I still can accesse the application using http. is it possible to access
the application using only https..?
Mohamed

Instead of using defaultauthenticator, you need to create RDBMS Authentication Providers inside myrelam of weblogic server.
http://docs.oracle.com/cd/E13222_01/wls/docs92/secmanage/atn.html#wp1204622
Regards,
Sunil P

Wiki CSS files over HTTPS use only RC4

I finally found the answer to my problem of why the wiki CSS files wouldn't load.
It turns out that the wiki forces an HTTPS connection and it retrieves the CSS files from https://d11xdyzr0div58.cloudfront.net. The encryption used for those CSS files uses 128-bit RC4 with MD5. In Firefox, the about:config parameter name is
security.ssl3.rsa_rc4_128_md5
I had turned off all RC4-based encryption for SSL3 in about:config because RC4 is old and not appropriate for secure use in the modern day. Since SSL works by the server offering to the client all of the encryption algorithms it's willing to use, and then the client selects the ones it likes, my assumption was that if the encryption parameters for a connection include RC4 Firefox would just not ever pick one of the RC4 options. However, I had no idea that there would be a website that ONLY offered RC4. My guess is that this is the case for the wiki's CSS file server, because only by turning on the about:config parameter mentioned above can I get the CSS files to load.
Is there a way to address this issue? Preferably, either the CSS file server needs to support alternative algorithms (it looks like a cloud host, is that under our control at all?), or the wiki needs a way to be viewed in non-HTTPS mode. I don't care about the security of the wiki CSS files, I care about having RC4 turned on in Firefox -- I shouldn't have to enable it.
I considered filing a feature request, but I wanted feedback first.

A couple of years ago, I wrote an extension for Firefox called CipherFox (see my sig below). One of its features is disabling RC4 in about:config. I've had RC4 disabled all this time, and the Arch Wiki is the first time I've ran into trouble with it being disabled.
I too don't care much about the CSS files being encrypted. Here's what I did a couple of months ago as a crappy, hacked-up workaround:
(1) A Greasemonkey script to change link and script href's to point to http instead of https:
// ==UserScript==
// @name Archwiki Cloudfront SSL
// @description Removes SSL from Cloudfront href's
// @version 1.0.0
// @author MkFly
// @include http://wiki.archlinux.org/*
// @include https://wiki.archlinux.org/*
// ==/UserScript==
var head = document.getElementsByTagName('head')[0];
var link = head.getElementsByTagName('link');
var script = head.getElementsByTagName('script');
var cloudfront = "d11xdyzr0div58.cloudfront.net";
for (var i in link) {
link[i].href = link[i].href.replace("https://" + cloudfront, "http://" + cloudfront);
for (var i in script) {
script[i].src = script[i].src.replace("https://" + cloudfront, "http://" + cloudfront);
(2) With that installed, loading the Wiki pages was still delayed while it tried to connect via SSL and waited to time out. I worked around that by blocking them with Adblock Plus:
|https://d11xdyzr0div58.cloudfront.net/*
I know this is a hacky way to do it, but it works for now. Hopefully Cloudfront will let us use something better than RC4 in the future.
Last edited by MkFly (2011-01-26 05:29:22)

Would like to disable HTTP and use only HTTPS yet I get side effects

Hello,
I have established a secure connection between the AS ABAP and AS Java.
I would like assure that all communication between the servers is using https and for that, as a test, I have deactivated the http service using SMICM transaction.
The only side effect I could recognize so far is that the Web Dynpro for ABAP stuff doesn't work through transaction SE80, the working area simply doesn't come up. If I activate HTTP again it is working.
Am I doing the right thing by disabling HTTP completely and if yes, what else do I need to do in order to prevent this side effect from happening?
Roy

humuhumunukunukuapuaa wrote:
If I get some nice approvals on my app spree in 10 days, I would like to close Talbots and Abercrombie and Fitch store cards. Total CL for the 2 is $2,700 ($1,350 each) but I can make up for that closure and utilization loss by getting quite a bit more than those amounts on majors during my app spree. Talbots has only been open 4 months, A&F one year. I have other cards that are the same age or older so should not majorly affect AaoA. Thoughts? I know some will say don't close cards, but they're store cards and I don't need to be responsible for store cards I don't use.If you have no use for them and don't foresee using them in the future then you should probably close them out. They won't affect your AAoA as the cards will stay in your reports for 10 years. No sense in keeping cards that you don't want just to take up room in your sock drawer.

HTTP GET only works once

Web UI Builder:
I have a device that responds to HTTP GET messages.
I made a simple vi that uses the HTTP GET String function connected to a string constant and WireShark to monitor Ethernet traffic.
When the vi is first run an HTTP message is sent and replied to.
If the vi is run again the message is not transmitted.
If the HTTP GET message is changed the new message will be transmitted. But not twice.
If LabVIEW Web UI Builder is closed and restarted the message will again be sent just once when run.
Why is the message only being sent once? It's like all outgoing messages are being tracked and only sent once.

I think this is standard (but not always desirable) behavior of the networking stack that Web UI Builder uses. (On Windows, it's basically the built in/ Internet Explorer networking stack). After the first GET request with the same URL, if the server doesn't send no-cache headers, a cached result will be returned.
If you control the server that you're connecting to (and can add HTTP headers), try adding a no-cache header to the GET response. ("Cache-Control: no-cache" is the first one I'd try).
If you don't control the server you're connecting to / that doesn't work, another workaround is to append a query string parameter with a random number or timestamp. With this approach, the GET URL is always changing, so the caching behavior is disabled and the request should always go to the server.
(Something like this appended to the end of the URL:
or, "&n=[timeInTicks]" if you're already using other query parameters)

How to disable the security code and use only the Touch ID

how to disable the security code and use only the Touch ID

You can't use Touch ID without a passcode.
http://support.apple.com/kb/HT5883

How to send multiple files with it's original name over HTTPS using one CC?

I am working on a File to HTTPs scenario. It is in production and working fine. Currently we send only one file and I have hard coded the name in the communication channel in the header fields. Now we have to send more files with different names and I want to use only one receiver channel instead of many. We need to send the files with their original names.
I used the ASMA in the sender File Adapter and I see the FileName in the dynamic configuration under http://sap.com/xi/XI/System/File name="FileName".
I know we can use a UDF in message mapping and get the value and put it in HEADERFIELDONE. But we don't want to use mapping as the files are huge and we don't want to insert XML tags in the payload.
So how do I put the Filename from the DynamicConfiguration to the HTTP header field as FileName without using mapping? Are there any settings?
Can I put something in the PROLOG or can I use any other module in the File Sender Adapter or is there any other option?
Any help is appreciated.
Thanks
Sai

See my blog:
/people/stefan.grube/blog/2009/06/19/unknown-use-case-of-dynamicconfigurationbean-store-file-name-to-jms-header-without-mapping
You have to put the configuration in sender channel, as HTTP adapter does not allow modules.
For the second module, put values related to HTTP adapter.

Only HTTPS requests are working for SOAP Sender and HTTP not working

wHi Experts,
We have enabled our HTTPS port ( SSL ) in NWA -- >> Security -- >> SSL and Key stores. So understanding is HTTPS port is now enabled on top of HTTP. So PI should be able to cater requests at both ports.
Now, we have developed a synchronous SOAP to RFC scenario and downloaded WSDL file. This file has both links -
a. http:<host>:<port>
b. https:<host>:<port>
We intend to make a PI system where both ports can work. Now questions.
1. When we test web service exposed from PI using SOAPUI tool, only HTTPS works fine and gets the response back. If we try HTTP URL, an error is encountered - HTTTPS scheme is required.
2. Is this whole understanding that both ports ( HTTP, HTTPS ) should be able to operate simultaneously correct ? Or this is not at all possible ?
3. In SOAP Sender, we tried selecting all 3 options - 1. HTTP 2. HTTPS without client authentication 3. HTTPS with client authentication.
None of the options have any effect on testing, Each time, only HTTPS request works and HTTP doesn't.
Can anyone please provide some hints for troubleshooting ?
Thanks..
regards,
Rajagopal.

The error "HTTPS scheme is required" is normally returned when the HTTP Security Level on the SOAP adapter is not set to "HTTP". I can see you have mentioned you have tried all these, maybe a cache refresh has gone wrong? Could try recreating the channel with just HTTP specified as security level and this should allow HTTP or HTTPS
I assume you are using a different port number for your HTTP and HTTPS requests from SOAP UI. Normally the HTTPS port is the same as the HTTP port number but the final zero changed to a 1 i.e. https://<host>:50001 instead of http://<host>:50000.
You should be able to confirm both HTTP and HTTPS work OK by loading some of the system webpages in a browser over HTTP and over HTTPS i.e. http://<host>:<port>/nwa and https://<host>:<port>/nwa
Chris

Send Idoc to AS2 System via HTTP using XI

Hi,
We need to send Invoice Idocs as XML files from SAP R/3 system to external AS2 system using XI. The communication will happen over HTTP using certificate. I tried using Plain HTTP adapter , but the message went into error 'ATTRIBUTE_CLIENT'. Why this error ?
I came across some blogs saying about Seeburger AS2 adapter , but is this the only possible way ?
Kindly guide.
Thanks.
Tushar

Yes , AS2 adapter is the solution for it.
Refer all the below threads for AS2 information and configuration which need to do for B2B integration:
SEEBURGER EDI adapter
Re: Pls.. Help Needed.. Seeburger Mapping Names..!!
Re: Seeburger AS2 adapter...
Re: AS2 Module tab.. Mapping Names for modified Standard Msg types ? ? BIC ??
AS2 adpater-- Configuration details for both SND and RCV.
AS2 Sender Adapter -- Need few details.

Export excel not supported in https using firefox

Export excel option is supported in http URL but not supported in https using firefox.

Hi Gnittala,
Thanks..
Pls find more info in below...
In our application 'export excel' option is present in 4 different pages. Using Jquery to calling the excel. All the excels working in development environment in both IE and FF. In testing env, all the excels working fine in IE. But only 2 pages excel are working in FF in testing env. Remaining not working and 'The connection was reset The connection to the server was reset while the page was loading' error page appears when we click on 'export excel' button.
More, all the Export excel option is supported in http URL but mentioned two only not supported in https using firefox.
Dev server OS is windows...QA / Prod server OS is Linux.
Application running on Interent site.
No specific instructions for exporting data to Excel (note: same scenario working on IE & FF in Dev env)

How to consume SAP enterprise services over https using third party tools?

Hi guys,
am just testing consumption of ES using jboss instead of NW for client applications. The ES in our internal ERP are bit strange, ie. they are using HTTPS transport even though you can configure ES with HTTP transport. (in this case, the requests are always redirected to HTTPS one). Wanna hear from perhaps someone who had similar experiences about
- Have you encountered the situation that ES can only exposed as HTTPS WS. Is there any way to enable HTTP ES?
- The way to consume ES over HTTPs. How to configure and generate the client which can talk HTTPs with ES?
Any comnments are thankful.
Best,
Ji
Edited by: Ji Hu on Oct 1, 2010 3:20 PM

Thanks.
Have solved the problem. I need to configure my client, i.e. JVM to connect the server with https. The generated ws client stub itself does not need to care about HTTPS or HTTP transport.
In some case, one do have enabled HTTP transport via soamanager, but it never became HTTP (redirected to HTTPS). I have no idea why, but have to talk in HTTPS as the only one option.

How to read XML file kept on NON-SAP server using the Http URL ?

Dear Experts,
I am working on CRM2007 web UI. I need to read a XML file placed on a shared server location by a third party program. Then process that XML file into CRM and create a quotation using the data extracted from the file.
All i have with me is the http URL that points to the location of the file.
I am supposed to read the file , create quotation and at later point of time i would be asked to update the quotation and then generated new XML representing updated quotation and replace the XML file on shared server location with this new updated XML file.
I know how to extract data from XML file into ABAP but i have no clue as to how to access the file on some other server using the http url i have and how to read it ?
I searched on the forum and i found the codes for reading XML file that is located either on client machine OR on the Application server wheareas my file is on some other than sap application server.
Please help me as its an urgent issue .
Points will be rewarded for sure.
Please help.
Thanks in advance,
Suchita.
p.s. : the http url to the file location is like -->
http://SomeServerDomain/SomeDirectory/file.xml

hi,
interesting task.
to request the file by a http call you need to create an if_http_client object.
More info is [here|http://help.sap.com/saphelp_nwmobile71/helpdata/en/e5/4d350bc11411d4ad310000e83539c3/frameset.htm]
to parse the file you either have to work with the ixml packages ([info|http://help.sap.com/saphelp_nwmobile71/helpdata/en/47/b5413acdb62f70e10000000a114084/content.htm]) or you use an XSLT transformation ([info|http://help.sap.com/saphelp_nwmobile71/helpdata/en/a8/824c3c66177414e10000000a114084/content.htm]).
uploading the final file isn't so easy. if you only have http, you should write a server script to allow uploading of the new file and copying it into the place of the old file. but you definitely need the script.
now it's your take. depending on how experienced you are in ABAP and networking this might turn out to be easy or pretty complicated.
have fun,
anton

Jwsc Error - Only HTTP ports are supported for JAX-WS

Hi
I am trying to create a Webservice from wsdl. I have been able to generate java files and jar file with wsdlc ant task.
However when i try jwsc I get follwoing error
[jwsc] [ERROR] - Only HTTP ports are supported for JAX-WS.
<----- follwowing task for generating java files --->
<taskdef name="wsdlc" classname="weblogic.wsee.tools.anttasks.WsdlcTask"/>
<target name="generate-from-wsdl">
          <wsdlc
               srcWsdl="wsdl_files/UserPrefWebService.wsdl"
               destJwsDir="web/web-inf/lib"
               destImplDir="src"
               packageName="com.ws.userpref"
               type="JAXWS"/>
     </target>
<----- follwowing task for generating class files ----THIS IS FAILING --->
     <taskdef name="jwsc" classname="weblogic.wsee.tools.anttasks.JwscTask" />
     <target name="build-service">
          <jwsc srcdir="src" destdir="ear">
               <jws file="com/ws/userpref/UserPrefWebServiceImpl.java"
                    compiledWsdl="web/web-inf/lib/UserPrefWebService_wsdl.jar"
                    type="JAXWS"/>
          </jwsc>
     </target>
<----- This is the Error --->
C:\Development\CFCDemoWorkspace\UserPreferencesServer>ant build-service
Buildfile: build.xml
build-service:
[jwsc] JWS: processing module /com/ws/userpref/UserPrefWebServiceImpl
[jwsc] Parsing source files
[jwsc] Parsing source files
[jwsc] 1 JWS files being processed for module /com/ws/userpref/UserPrefWebS
erviceImpl
[jwsc] C:\Development\CFCDemoWorkspace\UserPreferencesServer\src\com\ws\use
rpref\UserPrefWebServiceImpl.java 18:8
[jwsc] [ERROR] - Only HTTP ports are supported for JAX-WS.
[AntUtil.deleteDir] Deleting directory C:\DOCUME~1\138904\LOCALS~1\Temp\_3os716
BUILD FAILED
C:\Development\CFCDemoWorkspace\UserPreferencesServer\build.xml:24: weblogic.wse
e.tools.WsBuildException: JWS Validation failed.
Total time: 10 seconds
Does any one has any input on this error?
Thanks
Srikant

Thanks David,
Below is the wsdl
<s0:message name="ws_getUserPreference">
<s0:part element="s1:ws_getUserPreference" name="parameters"/>
</s0:message>
<s0:message name="ws_getUserPreferenceResponse">
<s0:part element="s1:ws_getUserPreferenceResponse" name="parameters"/>
</s0:message>
<s0:portType name="UserPrefWebServicePort">
<s0:operation name="ws_getUserPreference" parameterOrder="parameters">
<s0:input message="s1:ws_getUserPreference"/>
<s0:output message="s1:ws_getUserPreferenceResponse"/>
</s0:operation>
</s0:portType>
<s0:binding name="UserPrefWebServiceSoapBinding" type="s1:UserPrefWebServicePort">
<s2:binding style="document" transport="http://schemas.xmlsoap.org/soap/http"/>
<s0:operation name="ws_getUserPreference">
<s2:operation soapAction="" style="document"/>
<s0:input>
<s2:body parts="parameters" use="literal"/>
</s0:input>
<s0:output>
<s2:body parts="parameters" use="literal"/>
</s0:output>
</s0:operation>
</s0:binding>
<s0:service name="UserPrefWebService">
<s0:port binding="s1:UserPrefWebServiceSoapBinding" name="UserPrefWebServicePortSoapPort">
<s2:address location="https://localhost:7001/UserPrefService/UserPref"/>
</s0:port>
</s0:service>
</s0:definitions>
do i need to add <wlhttptransport/> in jws during the buid?

To install Oracle HTTP Server only

Hi,
I already installed Apex (3.0) in an Oracle database a while ago. I have used our Oracle iAS 10.1.2 as the application server. Now, I would like to install the Oracle HTTP Server in the database server and use it to run Apex. With the 10g companion CD, there is not any option to install the Oracle HTTP Server (Apache 1.3) only. Is there any way that I can install the Oracle HTTP Server only without installing Apex again? Where can I download it?
Also, I heard that there is a version of Oracle HTTP Server (Apache 2) bundled with Oracle 11g. Can I use it for Apex 3.0?
Thanks.
Andy

Hi,
See:
http://www.oracle.com/technology/software/products/database/oracle10g/htdocs/10201winsoft.html
Here you have the option, to install HTTP only
Kind regards,
Iloon
PS: be aware this cd contains apex 1.6 ;-)

Why is my browser showing only http and not https

Why is my browser showing only http and not https//

Western (ISO 8859-1) is the default encoding in Firefox.<br />
That web page doesn't specify an encoding and the server doesn't send one either, so the default in Firefox is used.<br />
If you get those diamonds then you either have a wrong encoding set or there is a problem with the (Verdana) font that is used.

Disable http - use only https

Similar Messages

Maybe you are looking for