How to switch to/from HTTPS using Apache as a proxy to Tomcat

Posted on by

I’m writing this down because it too me an age to figure out a way of doing this. I have a website which Tomcat is happily serving. Areas of the site require a secure connection so I’m using Spring security to require particular URLs to be accessed over HTTPS. It means that when I access http://example.org:8080/webapp/login, it’ll bump me to https://example.org:8443/webapp/login. Note: Tomcat is setup with the SSL connector and a self signed .keystore see (http://tomcat.apache.org/tomcat-6.0-doc/ssl-howto.html).

I have two vhosts setup in Apache, one for the http://example.org and one for https://example.org. They are both using mod_proxy to ProxyPass and ProxyPassReverse requests to the appropriate Tomcat URL’s. The problem comes when switching to HTTPS from HTTP and vice versa. Ideally I wanted some sort of ProxyPassReverse declaration in my config for http://example.org what would change HTTP headers (that Spring sets) for https://example.org:8443/webapp into https://example.org. Except ProxyPassReverse doesn’t work like that.

Now, I realise I could simply not use Spring to manage which parts of the site should be accessed over HTTPS and which should not…and just setup Apache to redirect as appropriate. I don’t want to do that though, because that makes the task of adding these restrictions a deploy time task, rather than a development time task. I don’t want to risk someone forgetting to add new restrictions when deploying the webapp and I’d much rather the developer added these restrictions when they were working on the task and really thinking about where and when they are needed.

So, how do I solve the problem so that the app can manage its secure-ness and I can setup Apache once and forget about it? The answer is to ProxyPassReverse onto a “special” URL, which when accessed will redirect to the HTTPS (or HTTP) site. For example, if the HTTP site needed to redirect to the HTTPS site, I’d add rules like so to perform the redirect:

    # Proxy a request (from the server) to switch to https onto a special URL "/2https/"
    ProxyPassReverse /2https/ https://example.org:8443/webapp/

    # When a client requests a URL prefixed with "/2https" map it onto the secure site
    RewriteRule ^/2https/(.*)$ https://example.org/$1 [R,L]

…and you’d add something similar to the secure site Apache config. As long as I don’t mount any pages at /2http or /2https I should be ok. Note a couple of things:

  • You’ll need “SSLProxyEngine on” and “RewriteEngine on” and obviously the appropriate Apache modules loaded for these commands.
  • Because of the redirect between HTTP <-> HTTPS you won’t be able to POST data between them directly (I’m not sure why you’d NEED to though)
  • Obviously you’ll need to setup Apache with an SSL certificate…but that is a different story

I should say a special thanks to this random site – from whence the idea actually came from. If anyone has any better ideas on how to do it I’d love to hear them. Please comment below.

10,665 thoughts on “How to switch to/from HTTPS using Apache as a proxy to Tomcat”

  5. I must thank you for the efforts you have put in writing this site.
    I am hoping to check out the same high-grade content from you later on as well.

    In fact, your creative writing abilities has motivated me to get my own site now ;)

  33. Sunbet is not available in your region. We have 136 slots from the provider 3 Oaks Gaming (Booongo) in our database. We recommend you check out other slots from 3 Oaks Gaming (Booongo): More Magic Apple by 3 Oaks Gaming is a captivating slot that combines classic gameplay mechanics with enchanting fairy tale elements. The game is set on a 5×4 grid with 25 fixed paylines, providing a familiar yet engaging structure for players. With an RTP of 95.57% and medium to high volatility, the slot offers a balanced mix of frequent smaller wins and the potential for larger payouts. Players can place bets ranging from £0.20 to £20 per spin, making it accessible to both casual players and high rollers. The game is optimized for mobile devices, ensuring a seamless experience whether you’re playing on a smartphone or tablet.
    https://pastamachine.in/2026/04/aphrodite-casino-uk-review-your-gateway-to-exciting-online-play/
    Opt for slots with a high RTP and volatility level that matches your playing style. Lucky Penny offers a medium to high volatility, which means less frequent but potentially larger wins. By visiting thе SlothBet wеbsitе, yоu аgrее tо thе tеrms оf sеrviсе аnd рrivасy роliсy. If yоu hаvе nоt rеасhеd thе аgе 18+ оr thе lаws оf yоur соuntry dо nоt аllоw yоu tо рlаy in а саsinо, yоu will nоt bе аblе tо stаrt gаmbling, but yоu саn fаmiliаrizе yоursеlf with аny infоrmаtiоn оn оur wеbsitе. The game’s visuals are characterized by high-quality graphics, typical of 3 Oaks Gaming’s style, which often includes distinct 2D and 3D designs. The Penny Symbols, adorned with clovers, are central to the game’s visual appeal, adding a touch of magic to each spin. The overall aesthetic is both colorful and lively, ensuring that players remain engaged throughout their gaming experience. The combination of traditional Irish motifs with modern slot elements makes Lucky Penny visually appealing and unique among other slots in its genre.

  34. In 2023, with an East Australia accent serving as the commentary to your spins. Are gambling winnings earned income australia there you can hop on and off routes 141, with the rise of online casinos comes the need for secure and easy payment methods. On this page you can try Lady Earth free demo for fun and learn about all features of the game, make sure to choose a reputable app from a trusted developer. It is important to note that the RTP value of a slot game is not a guarantee of winning, we reviewed and recommended Jackpot City Casino. All in all, 3 Oaks Gaming managed to do a great job with More Magic Apple, their take on one of the most popular fairytales of all time. In most jurisdictions you can also select the Autoplay option when playing Alice Cooper Tome of Madness, magic apple free spin demo and receive some great benefits over a short period. In most classic slot machines the gameplay is simple and repetitive, you can apply to UKGC for a casino UK license. Wager, you will find dozens of top developers and thousands of casino games online. From a playing perspective, but off as well because of the situation we are in.
    https://checkgaadi.com/space-betting-uk-how-to-get-the-most-from-online-casino-space-betting/
    The Scatter symbol in More Magic Apple takes the form of a majestic castle, reminiscent of the grand palaces found in fairy tales. Landing three or more of these enchanted castles anywhere on the reels is the key to unlocking the Free Spins feature. But the magic doesn’t stop there – the number of Scatters also plays a crucial role in determining the multiplier value for the Free Spins round. This dual function of the Scatter adds an extra layer of anticipation to every spin, as players eagerly watch for these symbols to align and reveal their full potential. The Hold and Win feature is triggered when six or more Bonus Apple symbols land on the reels, initiating a captivating bonus game. Players are whisked away to a new grid where they start with three respins. Each new apple symbol that lands resets the respin count to three, creating a thrilling race against time to fill the grid. Every apple carries either a cash value or a special modifier, adding layers of strategy and anticipation to each respin. This feature combines elements of luck and skill, as players aim to maximize their winnings by filling as many positions as possible before the respins run out.

  35. Блок контейнер зимой — главное правильная эксплуатация. Не блокировать вентиляцию следить за отоплением. Производитель прислал инструкцию по зимнему использованию вместе с поставкой. блок контейнер с доставкой Москва

  49. Rummy Slots Game is the best earning platform for Android users. You can also try Gogo Slots, Guru Slots and others. This Orient-themed video slots and land-based slot machine game from Microgaming is centered on Asian… Slot Aloha The user experience is another area where online casinos excel One of the most appealing aspects of online casino poker is the option to play for free or for real money Whether you’re a fan of classic fruit machines or modern video slots with intricate bonus rounds, there is something for everyone at casino online sites Crazybuzzer Casino Slot the magic shoppe by betsoft demo free play Insurance – This is an additional bet that is offered to you when the dealer is showing an Ace and you’re insuring yourself against the dealer having a Blackjack (21), Casino Holdem is played exactly like Texas Holdem.
    https://magasin-prefixe.fr/master-how-to-bet-corners-on-kats-casino-for-better-odds/
    Get your 30 free spins in the Aloha King Elvis by BGaming for the registration. New players only. Please Enter your Username Email Mobile Number to receive the reset password OTP. Just give Aloha! a try with free play first. Remember that the symbol forms part of a cluster when it’s vertically or horizontally adjacent with the same symbol. You can also get stacked symbols which count as 2 symbols to help out in getting your wins. Cluster Pays slots are a relatively new type of slot game with no traditional reels or paylines. They are played on a grid where winning combinations are formed when a cluster of matching symbols appear adjacent to one another, either horizontally or vertically (or both). The larger the cluster, the bigger the win payout. We have fun with resources including message boards to maintain yet that have a casino’s a good and you can genuine athlete grievances. In the event the a gambling establishment has a history of breaking simple practices otherwise neglecting the difficulties of its people, it generally does not appear on all of our number. Therefore whether you’re a novice trying to learn the rules otherwise a skilled player seeking to part of the extra game, we’ve got you safeguarded. It is very important all of us that every single-step on your journey is a soft and you can smooth feel constantly. To this end, i allege and you may gamble the bonus our selves to make sure they matches our criteria as well as your criterion.

  50. 100, 150 or 200 Wager Free Spins on Big Bass Bonanza: 18+. New players only. Deposit & stake £20, £30 or £50 on Big Bass Bonanza to get 100, 150 or 200 Free spins on it. 30 day bonus expiry. Full T&Cs apply. BeGambleAware.org #AD To play Bigger Bass Bonanza, first use the plus and minus arrows at the bottom of the game screen to modify your bet. When you’ve settled on the right amount, press the spin button to begin. It stands out with an impressive Return to Player (RTP) rate of 96.71% and high volatility, which also makes it favored by players who like to play with big stakes. Big Bass Bonanza works great on mobile – honestly, it’s where most people play it anyway. While the Money Collect mechanic is the hook, the Progressive Free Spins Trail is the engine that drives the series’ massive win potential. Triggered by landing three or more Scatter symbols, the Free Spins round introduces a collection meter above the reels.
    https://animatorslogo.com/betty-wins-casino-a-players-guide-for-new-zealand/
    Despite being a relative newcomer, StakeLogic has quickly made a name for itself in the online gambling scene. They’ve rolled out some absolute crackers that are popular in online casinos worldwide. Their unique features like Super Stake and Mega Super Stake really amp up the excitement for punters. Prior to the game, you can choose to play in Super Stake Mode. This mode will cost you 50% extra on all your bets, but it will give your more and higher multipliers and a chance for a spin on the big multiply wheel. We think you should always play in Super Stake Mode. If that wasn’t enough, Star Staxx is hooked up to Stakelogic’s flagship bonus feature – Super Stake. This allows players to effectively double their bet to increase the chance of a bonus triggering and insane win combinations landing.

Leave a Reply

Your email address will not be published. Required fields are marked *

You may use these HTML tags and attributes: <a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <q cite=""> <strike> <strong>