How to switch to/from HTTPS using Apache as a proxy to Tomcat

Posted on by

I’m writing this down because it too me an age to figure out a way of doing this. I have a website which Tomcat is happily serving. Areas of the site require a secure connection so I’m using Spring security to require particular URLs to be accessed over HTTPS. It means that when I access http://example.org:8080/webapp/login, it’ll bump me to https://example.org:8443/webapp/login. Note: Tomcat is setup with the SSL connector and a self signed .keystore see (http://tomcat.apache.org/tomcat-6.0-doc/ssl-howto.html).

I have two vhosts setup in Apache, one for the http://example.org and one for https://example.org. They are both using mod_proxy to ProxyPass and ProxyPassReverse requests to the appropriate Tomcat URL’s. The problem comes when switching to HTTPS from HTTP and vice versa. Ideally I wanted some sort of ProxyPassReverse declaration in my config for http://example.org what would change HTTP headers (that Spring sets) for https://example.org:8443/webapp into https://example.org. Except ProxyPassReverse doesn’t work like that.

Now, I realise I could simply not use Spring to manage which parts of the site should be accessed over HTTPS and which should not…and just setup Apache to redirect as appropriate. I don’t want to do that though, because that makes the task of adding these restrictions a deploy time task, rather than a development time task. I don’t want to risk someone forgetting to add new restrictions when deploying the webapp and I’d much rather the developer added these restrictions when they were working on the task and really thinking about where and when they are needed.

So, how do I solve the problem so that the app can manage its secure-ness and I can setup Apache once and forget about it? The answer is to ProxyPassReverse onto a “special” URL, which when accessed will redirect to the HTTPS (or HTTP) site. For example, if the HTTP site needed to redirect to the HTTPS site, I’d add rules like so to perform the redirect:

    # Proxy a request (from the server) to switch to https onto a special URL "/2https/"
    ProxyPassReverse /2https/ https://example.org:8443/webapp/

    # When a client requests a URL prefixed with "/2https" map it onto the secure site
    RewriteRule ^/2https/(.*)$ https://example.org/$1 [R,L]

…and you’d add something similar to the secure site Apache config. As long as I don’t mount any pages at /2http or /2https I should be ok. Note a couple of things:

  • You’ll need “SSLProxyEngine on” and “RewriteEngine on” and obviously the appropriate Apache modules loaded for these commands.
  • Because of the redirect between HTTP <-> HTTPS you won’t be able to POST data between them directly (I’m not sure why you’d NEED to though)
  • Obviously you’ll need to setup Apache with an SSL certificate…but that is a different story

I should say a special thanks to this random site – from whence the idea actually came from. If anyone has any better ideas on how to do it I’d love to hear them. Please comment below.

10,679 thoughts on “How to switch to/from HTTPS using Apache as a proxy to Tomcat”

  9. Hi guys!

    Want a legit slot site?

    Have you heard of Spinight Casino — a crypto-friendly casino: check this out

    Huge game selection. Highly recommended.

    What do you think?

  14. Привет всем Как увеличить срок службы оборудования Монтаж и обслуживание оборудования требуют соблюдения стандартов качества. Это обеспечивает надежность и безопасность эксплуатации. Полная информация по ссылке – https://dagtechservice.ru/ картинки сервисное обслуживание оборудования капитальный ремонт оборудования отдел сервисного обслуживания оборудования как проводится техническое обслуживание Архивы Плановое ТО – Технический сервис сервисное обслуживание метрологического оборудования Удачи и комфорта в жизни Влияние оригинальных и аналоговых деталей 7713030

  27. Renomowana platforma hazardowa Energy Casino działa na rynku od 2013 roku z licencją Malta Gaming Authority (MG). To darmowe kasyno internetowe oferuje imponującą kolekcję ponad 6000 gier, zapewniając graczom różnorodne możliwości rozgrywki. W kasynie znajduje się szeroki wybór slotów, takich jak Tramp Day, Egypt King 2 i The Magic River, które można wypróbować za darmo w trybie demo. Dzięki temu, darmowe spiny gates of olympus bez depozytu portfelem internetowym lub przelewem bankowym. Z 20 liniami wypłat i 5 bębnami, a także jego aktualne sklepy z monetami. Zaczynają się losowo i wszystko, pin up casino no deposit bonus Wyspa Slots nie ma tak wielu bieżących promocji. Darmowe spiny pixies of the forest bez depozytu joker Millions nie ma zdolności graficznej, jak w niektórych innych witrynach.
    https://vav.com.my/pelican-casino-bonus-%e2%8e%af-recenzja-dla-graczy-z-polski/
    W SlotsUp przygotowaliśmy rzetelną recenzję slotu Gates of Olympus, która opiera się na szczegółowych badaniach i naszym doświadczeniu ze 100 spinów, które wykonaliśmy, aby doświadczyć mechaniki i sprawdzić współczynnik trafień. Ponadto polecamy najlepsze kasyna online. Dowiedzmy się więc więcej o grze i wypróbujmy jej darmowy tryb demo! Bonusowa gra kasynowa w Gates of Olympus od Pragmatic Play zapewnia 15 darmowych obrotów. Aby je aktywować, należy złapać 4 symbole Zeusa na polu gry podczas głównej rundy gry. Podczas rundy bonusowej Zeus może pomóc w uzyskaniu dodatkowych mnożników zwiększających wygrane. Ponadto podczas rundy bonusowej istnieje możliwość zdobycia dodatkowych obrotów darmowych, jeśli na polu gry pojawi się więcej symboli Zeusa. Dla graczy, którzy chcą poznać wszystkie funkcje bez ryzyka, dobrym wyborem są darmowe wersje Book of Ra i Book of Ra 6 gratis. Klasyczna edycja ma 5 bębnów i 9 linii wypłat, natomiast wersja 6 oferuje dodatkowy bęben i funkcję Extra Bet. Obie wersje dostępne są bez rejestracji i zawierają symbole specjalne oraz tryb ryzyka, który zwiększa emocje w grze.

  28. “Zeus: Pan Olimpu” to klasyczna gra strategiczna z gatunku city-builder, która przenosi graczy w serce antycznej Grecji, gdzie mają za zadanie stworzyć i zarządzać własnym miastem. Ale to nie jest zwykły symulator budowy miasta – w “Zeusie” gracze muszą nie tylko dbać o potrzeby swoich mieszkańców, ale także zadowolić bogów Olimpu, którzy mogą błogosławić miasto lub rzucać na nie klątwy. Rudy srebra – aby wydobywać srebro, a następnie wytapiać je i wybijać monety musimy zbudować Mennicę. Nie musi ona znajdować się w pobliżu złoża, ale im ta odległość mniejsza, tym sprawniej przebiega produkcja drachm. Handluj przedmiotami z gier z członkami społeczności przy pomocy środków Portfela Steam.
    https://indiaedge.click/2026/04/10/pelican-casino-60-zl-bonus-powitalny-dla-nowych-graczy-2/
    Również pod względem grafiki, ścieżki dźwiękowej czy animacji niewielu producentów może się równać z Pragmatic Play! Niezależnie od tego, czy odpalacie ruletkę czy kolejną część kultowej serii, logo Pragmatic Play stanowi zawsze gwarancję uczciwej, świetnej zabawy. This website is using a security service to protect itself from online attacks. The action you just performed triggered the security solution. There are several actions that could trigger this block including submitting a certain word or phrase, a SQL command or malformed data. Kajot Casino dodało gry NetEnt, oferując graczom światowe hity i jeszcze większą różnorodność rozrywki. Warto też wspomnieć, że gry Gates of Olympus 1000 w swojej ofercie nie ma Total Casino – jeżeli grasz na tej stronie regularnie i chciałbyś sprawdzić ten slot, niestety nie będzie to możliwe.

  29. Wonderful article! That is the kind of info that should be shared across the
    net. Shame on Google for not positioning this submit higher!
    Come on over and visit my website . Thank you =)

  30. SATTA MATKA RESULT SITE The Matka 420 fix game is related to the Prediction of Matka games that are very accurate. By playing these games one is assured of winning games. Matka420.live helps you to get fix matka games. People from different parts of world also enjoy playing various other Satta Matka games such say Milan Day Satta Matka, Main Bazar Satta King, Time Bazar. Those people who want to play this exciting game should not rely on false websites because such websites are there on the internet to cheat people. Welcome to MyDpBoss – the trusted destination for live and fast Satta Matka results including Kalyan, Milan, Madhur, and more. Our platform is updated daily with accurate charts, guessing tips, and lucky numbers. Whether you’re looking for Kalyan Matka results or Satta strategies, MyDpBoss delivers it all in real-time. Bookmark us for fast results and reliable updates.
    https://lmkkuninganbarat.com/vegas-kings-slot-review-for-new-zealand-players-2/
    Book Book Liverpool secured a statement 1-0 win over an in-form Real Madrid in the Champions League at Anfield on Tuesday, sealed by a single second-half goal from Alexis Mac Allister. On the night that Trent Alexander-Arnold returne to Anfield, receiving a decidedly mixed reception from those inside the famous stadium when he was brought on, the celebrations were all red. Live Betting is also a great way for betting enthusiasts to explore various markets that they wouldn’t otherwise. For instance, you could bet on a team to be up by 4 goals at halftime, only to hedge with a comeback in the second half of the same game. This allows Live Betting to be more fluid and exciting than standard pre-match betting. Existing customers can enjoy our extensive range of betting promotions across our sportsbook. We have Enhanced Odds specials to pick up a little extra on selections, as well as free bets on select matches for placing a qualifying Bet Builder.

  31. Strona główna Breaking News: Major Updates Announced for 15 Dragon Pearls Casino and Slot Game Something went wrong. Please try again. Legal casino gambling with license. This will also guarantee oversight by UK governing bodies, in which you take time to consider your options. With all this in place, extra prizes. They are accompanied by fun and unique animations whenever they land in a combination, please. To coincide with the launch of the updated game, the developers have launched an extensive marketing campaign that promises to raise awareness and generate buzz around the revamped 15 Dragon Pearls slot. Key aspects of this campaign include: Pearl-fectly Tailored for the Modern Gamer: 15 Dragon Pearls Review © 2026 Authograph Plus . All Rights Reserved. The Casino offers a wide range of gaming options to suit all types of play and personal interest, there are several options for Australian players who want to play pokies without risking any real money. Transactions are processed quickly, as history has proven. Manage your bankroll: It’s important to set a budget for your video poker play and stick to it, just like in a real game of roulette.
    https://cimertec.com/?p=4903
    Looking for Dragons Pearl slot free spins deposit bonus 2025? рџђІ Read our review and get $100 Free welcome bonus for real money play. Whether you are a seasoned player or a beginner, croydon hotel pokies opening hours you can avoid losing more money than you can afford and increase your chances of winning in the long run. There will be plenty of talks on the status of crypto and blockchain technology adoption during the past year as well, but it is certainly very climatic and perfectly writes in the climate of the slot. If you choose to spin the reels on the Dragon’s Pearl slot, you could win up to 500,000 coins. You’ll experience medium volatility gameplay with an RTP of 95.26%. The main thing at stake is of course the freedom of the Dragon’s Pearl, but this slot also offers lots of different line and line-bet combinations to allow slot players of all levels the chance to take part in this epic adventure. You can play either 1, 11, 21, 31 or 41 lines on any spin, and place line-bets of between 1 and 20 coins. This means there’s a minimum bet of just 1 coin a spin, and a maximum bet of 820 coins spin.

  35. Привет всем Как снизить затраты на эксплуатацию Монтаж производственных линий включает комплекс работ по установке и синхронизации оборудования. Это обеспечивает стабильную работу всей системы и высокую производительность. Полная информация по ссылке – https://dagtechservice.ru/scheduled-maintenance/ договор постгарантийного обслуживания оборудования ремонт производственных линий сервисное обслуживания грузоподъемного оборудования монтаж технологического оборудования Архивы Техническое обслуживание – Технический сервис учебник монтаж промышленного оборудования Удачи и комфорта в жизни Как продлить ресурс оборудования после ремонта 7ef1635

  38. Good way of telling, and good post to obtain information about my presentation focus,
    which i am going to convey in academy.

Leave a Reply

Your email address will not be published. Required fields are marked *

You may use these HTML tags and attributes: <a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <q cite=""> <strike> <strong>