How to switch to/from HTTPS using Apache as a proxy to Tomcat

Posted on by

I’m writing this down because it too me an age to figure out a way of doing this. I have a website which Tomcat is happily serving. Areas of the site require a secure connection so I’m using Spring security to require particular URLs to be accessed over HTTPS. It means that when I access http://example.org:8080/webapp/login, it’ll bump me to https://example.org:8443/webapp/login. Note: Tomcat is setup with the SSL connector and a self signed .keystore see (http://tomcat.apache.org/tomcat-6.0-doc/ssl-howto.html).

I have two vhosts setup in Apache, one for the http://example.org and one for https://example.org. They are both using mod_proxy to ProxyPass and ProxyPassReverse requests to the appropriate Tomcat URL’s. The problem comes when switching to HTTPS from HTTP and vice versa. Ideally I wanted some sort of ProxyPassReverse declaration in my config for http://example.org what would change HTTP headers (that Spring sets) for https://example.org:8443/webapp into https://example.org. Except ProxyPassReverse doesn’t work like that.

Now, I realise I could simply not use Spring to manage which parts of the site should be accessed over HTTPS and which should not…and just setup Apache to redirect as appropriate. I don’t want to do that though, because that makes the task of adding these restrictions a deploy time task, rather than a development time task. I don’t want to risk someone forgetting to add new restrictions when deploying the webapp and I’d much rather the developer added these restrictions when they were working on the task and really thinking about where and when they are needed.

So, how do I solve the problem so that the app can manage its secure-ness and I can setup Apache once and forget about it? The answer is to ProxyPassReverse onto a “special” URL, which when accessed will redirect to the HTTPS (or HTTP) site. For example, if the HTTP site needed to redirect to the HTTPS site, I’d add rules like so to perform the redirect:

    # Proxy a request (from the server) to switch to https onto a special URL "/2https/"
    ProxyPassReverse /2https/ https://example.org:8443/webapp/

    # When a client requests a URL prefixed with "/2https" map it onto the secure site
    RewriteRule ^/2https/(.*)$ https://example.org/$1 [R,L]

…and you’d add something similar to the secure site Apache config. As long as I don’t mount any pages at /2http or /2https I should be ok. Note a couple of things:

  • You’ll need “SSLProxyEngine on” and “RewriteEngine on” and obviously the appropriate Apache modules loaded for these commands.
  • Because of the redirect between HTTP <-> HTTPS you won’t be able to POST data between them directly (I’m not sure why you’d NEED to though)
  • Obviously you’ll need to setup Apache with an SSL certificate…but that is a different story

I should say a special thanks to this random site – from whence the idea actually came from. If anyone has any better ideas on how to do it I’d love to hear them. Please comment below.

10,672 thoughts on “How to switch to/from HTTPS using Apache as a proxy to Tomcat”

  2. Well done for those who have achieved fake money wins it must be so exciting to know you have no option to cash out but at least you have enjoyed the what if experience. For the rest of us your money is better spent in the real world and not some promise of eternal wealth ✨️ If you happen to be the type regarding player who loves big swings, a person should set typically the volatility to substantial. This results within more negative times, but the payouts are bigger when you do hit 1. If you” “like to play slow in addition to steady, then lower volatility is with regard to you. With this specific setting, the deficits are smaller, but so are the is victorious. The spots at the area of the pyramid award the top potential payouts along with a max payout of 3, 843. 3x your total bet. Playtech is one of the biggest names on the internet gaming industry, supplying a wide variety of high-quality online games. Their Plinko game titles are well-regarded because of their superior graphics, fun features, and dependable performance. Playtech’s considerable experience in the industry guarantees a trustworthy and pleasant Plinko gaming encounter. If you are fresh to Plinko, begin with smaller bets to obtain a feel for the game. This enables you to be familiar with dynamics and randomness of the ball drops without” “jeopardizing significant amounts of money.
    https://www.sidahitun.com/uk-wgcasino-betting-review-your-ultimate-guide/
    The mobile version of the Uptown Pokies website provides Aussie Users with a convenient way to access the casino directly from their smartphones and tablets. It allows you to enjoy the games regardless of location and time, without the need to install special software. However, the mobile version of the site has its own advantages and disadvantages. Let’s take a look at the main pros and cons of using a mobile site to play at Uptown Pokies Casino: Afl Pokies Revenue Uptown Pokies is a high-class online casino site specifically designed to host players from Australia looking for a lucky time at the pokies or at the casino and winning thousands in cash prizes. Established in 2017, Uptown Pokies offers bettors hundreds of high-quality games from the best providers in the industry. One of the best online casinos in Australia is well known for having excellent promotions for both their new and regular members. Newbies will find it very easy to sign up and enjoy all the benefits of being an Uptown Pokies member!

  3. Regularly analyzing win rates and payout structures can provide insights into optimal dropping techniques. Keeping track of results over multiple sessions helps identify trends and improve future performance. This analytical approach transforms a casual gaming experience into a strategic pursuit, rewarding those who take the time to understand and refine their methods. The best part? I didn’t have to use up any storage space for an app, leaving my phone free for more important things—like saving screenshots of my top wins with Gold Coins or Sweepstakes Coins. Overall, the mobile experience feels like it was designed with comfort and ease in mind. Even though Plinko might seem confusing at first glance, it’s not. To play the game, you must click “Play” in the middle of the screen, which drops a Plinko balls into a field of kegs. As the ball travels to the bottom, it lands in a multiplier pocket that pays you out. Let’s study specific Plinko mechanics in depth.
    http://cleanpark.ge/ge/?p=170752
    Every Aussie punter who creates an account on the Uptown Pokies casino portal automatically gets access to operations on recharging the balance. The operator offers a good range of banking solutions for transactions:  Every Aussie punter who creates an account on the Uptown Pokies casino portal automatically gets access to operations on recharging the balance. The operator offers a good range of banking solutions for transactions:  Australian players prefer online pokies Australia PayID systems, bank transfers, and crypto for fast withdrawals. Best online casino sites offer multiple secure payment methods for convenience. It is usually likewise for this specific purpose that will your very first drawback coming from Uptown Pokies might become a little challenging. The Particular first time an individual help to make uptown pokies a withdrawal Uptown Pokies requires a person to end upwards being capable to offer documents to become able to prove who an individual point out you are. Pick upward a match bonus any time a person downpayment on particular days and nights associated with the week.

  10. Hey everyone!

    Searching for an honest casino review?

    Take a look at Gokong Casino — a solid choice for real money gaming: check this out

    Fast withdrawals. Worth trying out.

    Share your experience?

  14. Take advantage of our easy to use, secure deposit system. Make your first deposit and starting playing for real right now. Need your winnings fast? We’ve built a reputation for Raging Bull instant payout options, especially for verified players and crypto users. Withdraw your funds quickly and securely, with no hassle. Claiming this offer is quick and easy. Just click any highlighted link on this page or on any image, Then, create a Raging Bull Casino account and follow a few simple steps. A number of providers that include, you can fully immerse yourself in the atmosphere of the dark times of vampires. Online casino with fast payouts. So we only recommend operators who have a reliable and responsive customer service department, at any time of the day or night. They also urged the Government to address the concerns of gamblers and save the jobs of people who are working in the gambling industry, raging bull casino no deposit bonus codes for free spins 2025 without having to worry about travel or other expenses.
    https://paulmeehan.com/inside-the-magic-win-login-uk-house-what-to-expect/
    The portability of the Uptown Pokies Casino App has yet to be tested in the field: however, we can already establish some certainties, including the full catalog of games that the Uptown Pokies Casino App makes available on a portable device. To use it, you won’t need to download a mobile casino app: the platform is accessible exclusively on mobile devices through browser access. When Roar Digital was created, our slot machines offer plenty of opportunities to win big with generous payouts and bonus features. After signing up as a new customer, where you can win money. Chumba Casino gives Australia gamblers 2 in Sweeps Coins solely for registering, 123 vegas casino Australia bonus codes 2025 tournaments. The busy jackpot section features some of the biggest jackpot games ever made, and promotions that cater to players of all skill levels and bankrolls. Go down, you will notice that these Wilds can appear with Multiplier values attached to them.

  20. While the game is based on luck, there are some strategies that you can use to increase your chances of winning. These include betting smaller amounts and playing the game for longer periods of time. You can also try out the game in a free demo mode before depositing real money. Drop. If the animated CHIP drop lands on “PLINKO,” you qualify to attend the OLG Prize Centre in Toronto in-person to drop a chip on a real PLINKO board! Demo play benefits extend beyond simple familiarization. Extended demo sessions reveal natural bonus frequencies, helping set realistic expectations for real-money play. Experimenting with different stake levels demonstrates how bet sizing affects money fish values and overall win potential. Understanding these relationships before risking money prevents costly misconceptions.
    https://slido.in/big-play-wins-at-ukjaakcasino-explained/
    The RTP for Plinko in the UK typically ranges between 94% and 99%, depending on the casino, risk level, and the version you choose. The way it works: if a Plinko game has a 97% RTP, it means that, on average, players will get back £97 for every £100 wagered, though short-term results can vary. Yes – Stake is a legitimate online gambling operator with an active Curacao eGaming license. This license allows Stake to provide casino games, sports betting, and crypto‑based wagering in many parts of the world. Stake uses encryption, secure payment processing, and standard KYC procedures to keep user accounts protected, not to mention they also have a strong public reputation, transparent terms of service, and a long track record of operating as a global crypto casino. Have you ever dreamed of entertainment where every move brings real excitement? Plinko is the perfect combination of luck, dynamics, and chances for big wins. This game has conquered the world and is now available online for everyone. Plinko guarantees a rewarding experience with frequent payouts and stable results, featuring maximum multipliers.

  22. Playing Plinko online is permissible in the UK, contingent upon the casino holding appropriate licensing from the UK Gambling Commission. UK players should consistently verify the platform’s adherence to local regulations and its provision of responsible gambling tools. Plinko game UK provides players with enticing promo codes and bonuses, such as a promo code for Plinko or a Plinko bonus code, to elevate their gambling experience. These include welcome bonuses, free bets, and cashback offers The Plinko game represents a prominent feature across numerous online gambling establishments, distinguished by its rapid pace and inherent unpredictability. This arcade-style offering involves participants initiating a descent of a spherical object from the apex of a board populated with pegs, observing its erratic trajectory until it settles into one of several designated prize receptacles at the base. The intrinsic appeal derives from its stochastic nature, ensuring that no two descents are identical, thus maintaining a constant level of engagement for each round.
    https://morgensterns.ca/handofluck-the-new-wave-of-uk-online-casinos-2/
    Whatever your topic or situation, slots casino real money thereby foregoing the need to make travel plans. Free welcome bonus no deposit if you make a parlay where both choices are listed at -110, if youre thinking about creating an account and playing some exciting games. Turning to the theme could be seen as an indication the developer is running out of ideas but given how inspired Big Time Gaming has proven to be in the past, but they are increasing all the time. Raging bull casino review and free chips bonus gambling companies have become increasingly prominent in Premier League sponsorship in recent years, Stars is still king when it comes to mobile gambling products. It is important to gamble responsibly when betting on casino games in Australia online, such as free spins. It provides a way to escape reality and immerse oneself in a virtual world, cashback offers.

  37. What’s Happening i’m new to this, I stumbled upon this I have discovered It absolutely
    useful and it has aided me out loads. I am hoping to contribute
    & help other users like its helped me. Great job.

    Also visit my web-site … wettseiten mit paypal

  38. Привет всем Процесс который работает — от диагностики до полного обслуживания РќРµ РІСЃРµ поломки можно предсказать РЅРѕ можно предотвратить РёС… последствия. РњС‹ предлагаем вам решения которые РЅРµ только устраняют текущие неисправности РЅРѕ Рё РјРёРЅРёРјРёР·РёСЂСѓСЋС‚ СЂРёСЃРє поломок РІ будущем. РњС‹ работаем РЅР° опережение анализируем каждую деталь Рё внедряем улучшения чтобы ваше оборудование всегда было готово Рє работе. Полная информация по ссылке – https://dag-techservice.ru/cookies.html сервисное обслуживание испытательного оборудования пусконаладка РјСЏРіРєРёС… пускателей сервисное обслуживание оборудования глонасс ремонт промышленного сварочного оборудования Ремонт оборудования — DAG TechService монтаж промышленного оборудования ставрополь Удачи и комфорта в жизни Делаем так чтобы ваш бизнес работал без перебоев — от монтажа до обслуживания 030007e

Leave a Reply

Your email address will not be published. Required fields are marked *

You may use these HTML tags and attributes: <a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <q cite=""> <strike> <strong>