title: How can I downshift from HTTPS (SSL) to HTTP? I'm using IIS7.5, AJP 1.3, and Tomcat 5.5 with SSL
body: <p>I'm running Windows Server 2008 R2 with IIS 7.5, AJP Connector 1.3, and Tomcat 5.5 with SSL enabled.  I am using a self-signed certificate, for testing only.  I also put in a security constraint in web.xml to enforce SSL for a particular page called BeforeAuth.jsp.  Tomcat is handling both HTTP and HTTPS traffic on the same website, as a result of enabling SSL.</p>
  
  <p>What I want to do is downshift from HTTPS to HTTP for a particular url-pattern, but I'm not sure how to go about it.</p>
  
  <p>In my ideal example, I have a login page, which uses HTTP.  When the user submits the page, it navigates to BeforeAuth.jsp, which is HTTPS.  Then, BeforeAuth.jsp is submitted and calls a closed-source 3rd-party Java authenticator (over HTTPS) and, after successful authentication, the authenticator takes care of pointing the browser to an home page called home.jsp, which is HTTP.</p>
  
  <p>So, it's Login(HTTP)->Authenticate(HTTPS)->HomePage(HTTP).</p>
  
  <p>How do I go about this?</p>
  
  <p>Thank you.</p>