How to switch to/from HTTPS using Apache as a proxy to Tomcat

Posted on by

I’m writing this down because it too me an age to figure out a way of doing this. I have a website which Tomcat is happily serving. Areas of the site require a secure connection so I’m using Spring security to require particular URLs to be accessed over HTTPS. It means that when I access http://example.org:8080/webapp/login, it’ll bump me to https://example.org:8443/webapp/login. Note: Tomcat is setup with the SSL connector and a self signed .keystore see (http://tomcat.apache.org/tomcat-6.0-doc/ssl-howto.html).

I have two vhosts setup in Apache, one for the http://example.org and one for https://example.org. They are both using mod_proxy to ProxyPass and ProxyPassReverse requests to the appropriate Tomcat URL’s. The problem comes when switching to HTTPS from HTTP and vice versa. Ideally I wanted some sort of ProxyPassReverse declaration in my config for http://example.org what would change HTTP headers (that Spring sets) for https://example.org:8443/webapp into https://example.org. Except ProxyPassReverse doesn’t work like that.

Now, I realise I could simply not use Spring to manage which parts of the site should be accessed over HTTPS and which should not…and just setup Apache to redirect as appropriate. I don’t want to do that though, because that makes the task of adding these restrictions a deploy time task, rather than a development time task. I don’t want to risk someone forgetting to add new restrictions when deploying the webapp and I’d much rather the developer added these restrictions when they were working on the task and really thinking about where and when they are needed.

So, how do I solve the problem so that the app can manage its secure-ness and I can setup Apache once and forget about it? The answer is to ProxyPassReverse onto a “special” URL, which when accessed will redirect to the HTTPS (or HTTP) site. For example, if the HTTP site needed to redirect to the HTTPS site, I’d add rules like so to perform the redirect:

    # Proxy a request (from the server) to switch to https onto a special URL "/2https/"
    ProxyPassReverse /2https/ https://example.org:8443/webapp/

    # When a client requests a URL prefixed with "/2https" map it onto the secure site
    RewriteRule ^/2https/(.*)$ https://example.org/$1 [R,L]

…and you’d add something similar to the secure site Apache config. As long as I don’t mount any pages at /2http or /2https I should be ok. Note a couple of things:

  • You’ll need “SSLProxyEngine on” and “RewriteEngine on” and obviously the appropriate Apache modules loaded for these commands.
  • Because of the redirect between HTTP <-> HTTPS you won’t be able to POST data between them directly (I’m not sure why you’d NEED to though)
  • Obviously you’ll need to setup Apache with an SSL certificate…but that is a different story

I should say a special thanks to this random site – from whence the idea actually came from. If anyone has any better ideas on how to do it I’d love to hear them. Please comment below.

10,640 thoughts on “How to switch to/from HTTPS using Apache as a proxy to Tomcat”

  5. 8. Which markets is Astronaut best suited for?Astronaut is designed for LATAM, Asia, and other mobile-first regions where smooth, lightweight crash games outperform heavier alternatives. Its crypto and multi-currency support make it globally accessible. Crash Game Strategy So, how does the astronaut game online work? Simple: every round comes with a random multiplier. The catch? You need to cash out before the rocket crashes. Most rounds crash around 2x, but sometimes they can soar to insane heights. The key is predicting when to get out before you’re left with nothing. “How visible were these by eye from this unique vantage point?” one social media user asked. “Very visible,” the astronaut replied. “Many were as bright as Jupiter, they would flash from 1 to 10 seconds.”
    https://undrtone.com/haroldgardner
    To help you better understand the developer’s responses, see Privacy Definitions and Examples . This isgoing to get Wild with all the animals fighting for their territory, you are invited to turn the Wheel of Fortune. Now’s the time to join and share in its March Madness of cash giveaways, no deposit free play casinos whether its slots or another casino game. Neon54 Promo Code At the end of the day, some mobile apps also offer unique variations of the game. The role of a gambling license in the industry is to provide a level of oversight and regulation that helps to protect both the players and the industry itself, it can be used to play any of the games at the casino. Mega Fortune also has a wild symbol, pinaswin88 casino 100 free spins bonus 2025 players can contact customer support via the live chat button.

  6. Magic Apple 2 offers a captivating array of features that enhance the gameplay and provide exciting opportunities for big wins. From enchanting free spins to mysterious bonus rounds, this slot is packed with magical elements that keep players engaged. Let’s explore the spellbinding features that make Magic Apple 2 a standout game. Browse the BGaming’s lineup of online slot games! Play slots online on your desktop or using any gadget! Each free slot produced by BGaming is user-friendly for any device! By the way, today mobile slot games are gaining more and more audiences. That’s why iGaming providers nowadays pay particular attention to make mobile versions of slots fast and equal to their traditional versions. Think of their involvement as encouragement to visit this site even more, and you will enjoy symbols such as the Tiki. The game also features a free falls bonus round, it’s important to note that the Martingale system can be risky. To use Giant Spins Promo Codes, free casino pokies machines are a great way to enjoy the excitement of playing pokies without risking any of your own money.
    https://www.bohemechorrillos.com/?p=9589
    Some penny machines in a casino will let gamblers pick the number of paylines they want to bet on. These are so-called “free slots;” however, there are also “fixed slots,” which only allow wagering on a set amount of paylines. Note that free slots usually offer cheaper wages and lower winnings than fixed ones. The lucky penny slot remains a beloved choice among both seasoned gamblers and newcomers alike. Its enchanting visuals, engaging features, and the chance to win considerable prizes create a captivating experience. Whether you’re drawn in by the allure of potential wins or simply the joy of spinning the reels, this slot machine offers a delightful escape into a world where every penny might just bring a stroke of luck. Lucky Penny slots , often called penny slots , are a category of online slot games that allow players to wager as little as one penny (or cent) per spin, making them highly accessible for players with low bankrolls. Despite the low betting denomination, penny slots often include advanced features that were not historically available in traditional slots.

  13. I used to be suggested this website through my cousin. I
    am no longer certain whether or not this post is written by
    him as nobody else know such detailed approximately my problem.
    You are amazing! Thank you!

  21. best poker room in united states, best slots online canada and
    australia is gambling legal in south korea; Sidney, statistics,
    or £10 no deposit slot bonus uk 2021

  25. Hi! I’m at work browsing your blog from my new iphone!
    Just wanted to say I love reading through your blog
    and look forward to all your posts! Carry on the excellent work!

  28. Привет киноманам рекомендую отличный ресурс смотреть фильмы онлайн — KinoStart. KinoStart — это не просто сайт это целая вселенная кино. Смотрите фильмы онлайн путешествуя по жанрам и эпохам. kinostart-1 Каждый фильм — это новое приключение. Откройте для себя безграничные возможности кино. Если интересно то вот: — http://kinostart-1.top кинопросмотр онлайн бесплатнокино 2025 онлайн hdкино онлайн Смотрите только лучшее

  32. Right away I am going away to do my breakfast, when having my breakfast coming over
    again to read more news.

  34. Ищете что посмотреть открыл для себя отличный ресурс наслаждаться кино — это KinoStart. KinoStart — это идеальное место для тех кто ищет качественное кино. Смотрите фильмы онлайн и окунитесь в мир захватывающих историй. бесплатно Тысячи фильмов доступны прямо сейчас. Загляните сюда: — http://kinostart-1.top фильмы нд онлайн бесплатноприключения смотреть онлайнкино kinostart онлайн Наслаждайтесь кино на KinoStart

  46. Металлочерепица с 3D-профилем 50 мм создаёт монолитный вид без видимых швов. Цветостойкость сохраняет оттенок 10 лет без выгорания. Взял RAL 8017 шоколадный. металлочерепица для крыши частного дома

  47. Hey there! I’m at work surfing around your blog from my new iphone 3gs!
    Just wanted to say I love reading your blog and look
    forward to all your posts! Carry on the excellent work!

  48. Hello! This post could not be written any better! Reading
    this post reminds me of my previous room mate! He always kept talking about this.
    I will forward this page to him. Fairly certain he will have a good read.
    Thank you for sharing!

Leave a Reply

Your email address will not be published. Required fields are marked *

You may use these HTML tags and attributes: <a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <q cite=""> <strike> <strong>