Nervous: Re-requested authentication then Crash.

Question

I've installed iTunes on a think pad and registered using my .Mac account information. I recently watched season 2.5 of Battlestar Galactica and thought I'd check iTunes for season 3. I was viewing the trailer for the season premier (this laptop ...has a dramatic attractive force driven by pressure gradient [this is a perfectly fine slang for inadequacy that begins with an "s" and would have been quicker but is sadly and pathetically verboten]... for video and can't keep up with the video frames so, while the audio is generally continuous, the video is a series of frozen frames)when the audio abruptly goes silent then the video disappears and is replaced by a, kind of cluttered looking, dialog asking me to enter my username and password if I wish to access the iTunes music store. This is odd because I'm already doing just that with a registered account but I, perhaps stupidly, comply. Immediately after I enter my username and password iTunes crashes. About this time the ugliness of this dialog starts to sink in with me and I begin contemplating the implications of possibly being "spoofed" -- my credit card is linked to this account; I've never actually bought anything from iTunes (no offense to Apple but I try to avoid paying any money to the RIAA)so I'm not clear on how vulnerable I am: Can someone buy stuff on iTunes with just my Apple ID and password?
Kevin
IBM (Lenova) ThinkPad Windows XP
titanium powerbook G4   Mac OS X (10.2.x)  

Answer 1

Well I think that I have figure it out. I must create more than one Network Channel in the Protocols tab inside the server.
However this brings me other problem. How do I make my application use the 1-Way SSL port for the application and the 2-Way SSL port for the certificate authentication?
If I keep the security constraint in the web.xml, there is no guarantee to wich port the client will be redirected!