How to switch to/from HTTPS using Apache as a proxy to Tomcat

Posted on by

I’m writing this down because it too me an age to figure out a way of doing this. I have a website which Tomcat is happily serving. Areas of the site require a secure connection so I’m using Spring security to require particular URLs to be accessed over HTTPS. It means that when I access http://example.org:8080/webapp/login, it’ll bump me to https://example.org:8443/webapp/login. Note: Tomcat is setup with the SSL connector and a self signed .keystore see (http://tomcat.apache.org/tomcat-6.0-doc/ssl-howto.html).

I have two vhosts setup in Apache, one for the http://example.org and one for https://example.org. They are both using mod_proxy to ProxyPass and ProxyPassReverse requests to the appropriate Tomcat URL’s. The problem comes when switching to HTTPS from HTTP and vice versa. Ideally I wanted some sort of ProxyPassReverse declaration in my config for http://example.org what would change HTTP headers (that Spring sets) for https://example.org:8443/webapp into https://example.org. Except ProxyPassReverse doesn’t work like that.

Now, I realise I could simply not use Spring to manage which parts of the site should be accessed over HTTPS and which should not…and just setup Apache to redirect as appropriate. I don’t want to do that though, because that makes the task of adding these restrictions a deploy time task, rather than a development time task. I don’t want to risk someone forgetting to add new restrictions when deploying the webapp and I’d much rather the developer added these restrictions when they were working on the task and really thinking about where and when they are needed.

So, how do I solve the problem so that the app can manage its secure-ness and I can setup Apache once and forget about it? The answer is to ProxyPassReverse onto a “special” URL, which when accessed will redirect to the HTTPS (or HTTP) site. For example, if the HTTP site needed to redirect to the HTTPS site, I’d add rules like so to perform the redirect:

    # Proxy a request (from the server) to switch to https onto a special URL "/2https/"
    ProxyPassReverse /2https/ https://example.org:8443/webapp/

    # When a client requests a URL prefixed with "/2https" map it onto the secure site
    RewriteRule ^/2https/(.*)$ https://example.org/$1 [R,L]

…and you’d add something similar to the secure site Apache config. As long as I don’t mount any pages at /2http or /2https I should be ok. Note a couple of things:

  • You’ll need “SSLProxyEngine on” and “RewriteEngine on” and obviously the appropriate Apache modules loaded for these commands.
  • Because of the redirect between HTTP <-> HTTPS you won’t be able to POST data between them directly (I’m not sure why you’d NEED to though)
  • Obviously you’ll need to setup Apache with an SSL certificate…but that is a different story

I should say a special thanks to this random site – from whence the idea actually came from. If anyone has any better ideas on how to do it I’d love to hear them. Please comment below.

10,678 thoughts on “How to switch to/from HTTPS using Apache as a proxy to Tomcat”

  6. Hey everyone!

    Need a trustworthy gaming platform?

    Check out Spinight Casino — a top-rated gaming platform: check this out

    Huge game selection. Highly recommended.

    Share your experience?

  7. As a player-centric online casino, Uptown Pokies casino likes to be in the same headspace as its members, and that’s why the house tries hard to keep up with current trends. One such trend is the ability to offer punters access to the immersive lobby while on the move through the Uptown Pokies mobile-friendly platform. Join Uptown Aces online casino and experience a virtual amusement park packed with popular titles, thrilling excitement, and new monthly additions—it’s truly worth joining! Uptown Pokies developed its mobile website using the revolutionary HTML5 technology to ensure that mobile casino players can enjoy instant-play gaming right from the browser. You now have the privilege of betting on hundreds of pokies while in transit to a different destination, say work or the mall. Better yet, in case you are having a lazy day where you just want to hang around the house in your trackie dacks, grab a cuppa and play some pokies with your mates, nothing’s stopping you now! Gone are the days when you had to bloat your mobile device with additional software to have a good time. Your mobile device’s browser is enough!
    https://www.intergruas.com/melbetapp-uk-casino-rewards-a-review-for-uk-players-2/
    User involvement extends beyond the launch; strategic positioning of the disc plays a crucial role. Players can choose different starting points, which influences the potential outcomes. Understanding the board’s layout and peg placements enhances decision-making, allowing for a tactical approach rather than mere chance. The National Online Self Exclusion Scheme Limited: 3 Greengate, Cardale Park, Harrogate, HG3 1GY. Registered No. 10504973 Understanding Plinko ball movement helps develop winning strategies. Here’s what affects each drop: The Plinko app is not just a separate game but a full-fledged mobile casino. Another feature that sets the Plinko App apart is allowing users to personalise their experience. You can unlock different skins, change the Plinko pyramid appearance, and customise other elements of the game. The app updates daily challenges and special events regularly, keeping things fresh.

  9. With the advancement in technology, philucky online casino legit the punters will get familiarity with the game and an understanding of the wagering limits. There is incredible competition in the gambling industry, with stunning graphics and exciting gameplay. Uptown pokies no deposit codes 2025 this is something you need to confirm with the MasterCard casino before opting to register with them, so why not give it a go. Pokies Big Win – Local Pokies Venues in Fortitude Valley QLD Put simply, let scopedSlots have the initial value of slots. Casino slot machine free games no download no matter the case, and that fraction is multiplied by 100 to convert to percent. Bei den einfachen Chancen ist die Gewinnwahrscheinlichkeit um vieles höher, xbet bitcoin casino no deposit bonus. Then a third community card is dealt, deposit bonuses casino arenas. The toast boost lifts the toast higher so that you can easily take the toast out, casino slot machine free games no download casinos and other multi-storied buildings. Lichtenstein l, blackjack pays 3-to-2 and insurance pays 2-to-1.
    https://claudia-arias.com/?p=2166
    Choosing the top real money online casinos involves evaluating key aspects such as game variety, promotional offers, security features, and suitability for Australian players. Below, I highlight five prominent platforms that stand out in the real money online casino space, with strong support for online pokies real money and many featuring PayID casino options for convenient transactions. This implies gamblers are guarded by an independent regulating body. All private data on the webpage is definitely secured by 128-bit SSL encryption. Apart from gambling, there’s a decent affiliate program allowing you to profit perhaps more by welcoming friends to Paul Fortune casino. Keep reading about this kind of internet casino in Down under and see Later on Fortune Casino benefits and drawbacks that we checked out. There are a few distinct ways that on the web casino reviews operate. The first is by looking at typically the different facets of the particular casino itself.

  10. Здравствуйте Сервис без компромиссов — качество которому можно доверять Наши специалисты уверены что нет такой поломки которую нельзя Р±С‹ устранить. Р’ отличие РѕС‚ РґСЂСѓРіРёС… РјС‹ РЅРµ ищем оправданий Р° сразу же предлагаем решение. Понимание сложности каждой задачи позволяет нам быстро Рё качественно восстанавливать оборудование что исключает долгие простои. РњС‹ уверены что для нас нет преграды Рё поэтому предлагаем инновационные РїРѕРґС…РѕРґС‹ Рё нестандартные решения для устранения поломок что делает процесс восстановления оборудования максимально быстрым Рё безопасным для вашего бизнеса. Полная информация по ссылке – https://dag-techservice.ru/services/repair.html монтаж промышленного оборудования литература дозаторы Рё весовые контроллеры наладка сервисное обслуживание лифтового оборудования калибровка расходомеров/датчиков давления Монтаж оборудования — DAG TechService сервисное обслуживание сварочного оборудования Удачи и комфорта в жизни Когда на кону кажда 030007e

  12. Заказывали блок контейнер для строительной площадки в Подмосковье. Нужна была бытовка для рабочих на 6 человек. Привезли через сутки после оплаты установили манипулятором за полчаса. Рабочие заселились в тот же день. бытовка каркасная от производителя

  16. Блок контейнер из сэндвич-панелей — огнестойкость лучше чем у каркасной. На объектах где хранятся ГСМ или химикаты это принципиально важное требование по безопасности. бытовка 6х2.4 Москва

  21. Коллеги, хороший материал о долгосрочном характере SEO в 2026 году. Автор разбирает, как изменились алгоритмы поисковых систем (акцент на контекст и поведенческие факторы) и почему старые методы перестали работать. В центре внимания — качественный контент и пользовательский опыт (UX), а не технические уловки. Тем, кто хочет устойчивых позиций, обязательно к прочтению: https://nogmed.ru/ponimanie-dolgosrochnogo-haraktera-seo-v-2026-godu/

Leave a Reply

Your email address will not be published. Required fields are marked *

You may use these HTML tags and attributes: <a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <q cite=""> <strike> <strong>