[mutuah]

Thanks brianhks.

Am using tomcat and servlet container and have already configured the web.xml

<security-constraint>
<display-name>secure_pages</display-name>
<web-resource-collection>
<web-resource-name>index.jsp</web-resource-name>
<description/>
<url-pattern>/index.jsp</url-pattern>
</web-resource-collection>
<user-data-constraint>
<description/>
<transport-guarantee>CONFIDENTIAL</transport-guarantee>
</user-data-constraint>
</security-constraint>

but the problem is all pages become secured (https) contrary to my wish. I want the login page and later another page to be secured.

What I need is to switch between the https and http sessions.