I’m writing this down because it too me an age to figure out a way of doing this. I have a website which Tomcat is happily serving. Areas of the site require a secure connection so I’m using Spring security to require particular URLs to be accessed over HTTPS. It means that when I access http://example.org:8080/webapp/login, it’ll bump me to https://example.org:8443/webapp/login. Note: Tomcat is setup with the SSL connector and a self signed .keystore see (http://tomcat.apache.org/tomcat-6.0-doc/ssl-howto.html).
I have two vhosts setup in Apache, one for the http://example.org and one for https://example.org. They are both using mod_proxy to ProxyPass and ProxyPassReverse requests to the appropriate Tomcat URL’s. The problem comes when switching to HTTPS from HTTP and vice versa. Ideally I wanted some sort of ProxyPassReverse declaration in my config for http://example.org what would change HTTP headers (that Spring sets) for https://example.org:8443/webapp into https://example.org. Except ProxyPassReverse doesn’t work like that.
Now, I realise I could simply not use Spring to manage which parts of the site should be accessed over HTTPS and which should not…and just setup Apache to redirect as appropriate. I don’t want to do that though, because that makes the task of adding these restrictions a deploy time task, rather than a development time task. I don’t want to risk someone forgetting to add new restrictions when deploying the webapp and I’d much rather the developer added these restrictions when they were working on the task and really thinking about where and when they are needed.
So, how do I solve the problem so that the app can manage its secure-ness and I can setup Apache once and forget about it? The answer is to ProxyPassReverse onto a “special” URL, which when accessed will redirect to the HTTPS (or HTTP) site. For example, if the HTTP site needed to redirect to the HTTPS site, I’d add rules like so to perform the redirect:
# Proxy a request (from the server) to switch to https onto a special URL "/2https/"
ProxyPassReverse /2https/ https://example.org:8443/webapp/
# When a client requests a URL prefixed with "/2https" map it onto the secure site
RewriteRule ^/2https/(.*)$ https://example.org/$1 [R,L]
…and you’d add something similar to the secure site Apache config. As long as I don’t mount any pages at /2http or /2https I should be ok. Note a couple of things:
- You’ll need “SSLProxyEngine on” and “RewriteEngine on” and obviously the appropriate Apache modules loaded for these commands.
- Because of the redirect between HTTP <-> HTTPS you won’t be able to POST data between them directly (I’m not sure why you’d NEED to though)
- Obviously you’ll need to setup Apache with an SSL certificate…but that is a different story
I should say a special thanks to this random site – from whence the idea actually came from. If anyone has any better ideas on how to do it I’d love to hear them. Please comment below.
1win bilet live https://www.1win60823.help
1win lucky jet predictor Uganda 1win lucky jet predictor Uganda
мостбет app скачать https://mostbet71852.help/
mostbet доступ сегодня http://mostbet73481.help
Hello to every single one, it’s actually a nice for me to go
to see this web page, it contains valuable Information.
1win live chat http://1win5743.help
мостбет результаты live мостбет результаты live
کلاً
برای کسایی که دنبال
گیمهای پولی
دنبالشن
این پلتفرم شرطی
به خوبی میتونه
گزینه ارزشمندی باشه
چیزی که جلب توجه میکنه اینه که
برندهایی مثل
enfeϳaг online
و
sibbet فعال
کاربرای زیادی دارن
خلاصه اینکه
رضایت داشتم
و
احتمالا
دوباره چکش میکنم
My web site: هک و امنیت (Https://barchasbsaz.ir)
the streamer scene started tagging Fortune Rabbit sessions by intent: test, real, target.
در کل ماجرا
برای افرادی که تمایل دارن
شرط بندی
فعالیت دارن
این وبسایت
احتمالا گزینه باشه
به درد بخوره
چیزی که جلب توجه میکنه اینه که
مجموعههایی مثل
پلتفرم еnfejaronline
و
sibbet آنلاین
فعالیتگستردهای دارن
در آخر کار
مفید بود
و
به احتمال قوی
بازم سر میزنم
My page … آموزش زبان فارسی
I’m not sure where you’re getting your information, but good
topic. I needs to spend some time learning much
more or understanding more. Thanks for great information I was looking for this info
for my mission.
I’m not sure exactly why but this site is loading
very slow for me. Is anyone else having this issue
or is it a problem on my end? I’ll check back later and
see if the problem still exists.
1win ставки на баскетбол Кыргызстан http://www.1win94317.help
mostbet jocuri pe bani reali mostbet jocuri pe bani reali
Provider transparency on Fortune Tiger math has improved this year.
Documented losing days became badges of discipline in the community.
Особенно понравился раздел про Основной состав, лидеры и тренеры в “Футбольной Гвардии”.
Смотрите сами:
https://arsenal-army.ru
1win вывести баланс на мегапей http://1win72951.help/
1win inregistrare Moldova 1win60823.help
Если вы любите сериалы то этот пост для вас нашёл то что давно искал Выбор сериала для просмотра – это серьезное дело ведь предстоит провести с героями много часов. Важно учитывать жанр сюжет и актерский состав чтобы получить максимальное удовольствие. новые сериалы Онлайн-платформы предлагают удобные фильтры и подборки которые помогут сделать правильный выбор. Погрузитесь в мир увлекательных историй. Больше информации по ссылке: — https://filmy-serialy-online-1.top сериалы 2025 смотреть онлайнсмотреть фильмы онлайн бесплатнодетективы онлайн бесплатно Надеюсь вы оцените
Почему пользователи выбирают площадку KRAKEN?
Маркетплейс KRAKEN заслужил доверие многочисленной аудитории благодаря сочетанию ключевых факторов.
Во-первых, это широкий и разнообразный ассортимент, представленный сотнями продавцов.
Во-вторых, интуитивно понятный интерфейс
KRAKEN, который упрощает навигацию, поиск товаров и управление
заказами даже для новых пользователей.
В-третьих, продуманная система безопасных транзакций,
включающая механизмы разрешения споров (диспутов) и возможность использования условного депонирования, что минимизирует риски для обеих сторон
сделки. На KRAKEN функциональность сочетается с внимательным отношением к
безопасности клиентов, что делает процесс покупок более предсказуемым, защищенным и, как следствие, популярным среди пользователей, ценящих анонимность и надежность.
Bu arada soyleyeyim, eger su yesili ile uyumlu renkler tesettur konusuyla ilgileniyorsan?z, suraya bir goz at?n. Link burada: https://kendifikirler.com/articles/su-yesili-uyumlu-renkler/
1вин авиатор http://1win94317.help/
mostbet retragere in euro https://mostbet13829.help/
Hello Im at work browsing your blog from my new apple iphone Just wanted to say I love reading through your blog and look forward to all your posts Carry on the outstanding work Sugar Rush 1000
“yeni evli cifte ev hediyesi ne al?n?r” konusu icin mukemmel bir kaynak var. Iste link: https://kendimacera.com/articles/ev-hediyesi-fikirleri/
1вин мбанк вывод 1win94317.help
mostbet verificare cont cat dureaza mostbet verificare cont cat dureaza
1вин бонус https://1win94317.help/
mostbet logare http://mostbet13829.help/
Между прочим, если вас интересует Последние новости и аналитика в боксе, посмотрите сюда.
Вот, делюсь ссылкой:
https://boxingmedia.ru
1вин зеркало https://1win72951.help/
1win depunere criptomonede comision 1win60823.help
whoah this blog is wonderful i love reading your posts. Stay up the great work!
You understand, many people are looking round for this information,
you could aid them greatly.
Feel free to surf to my homepage: deck builders cedar park
Appreciate this post. Let me try it out.
1win бонус Киргизия http://1win56183.help/
1win Кыргызстан кирүү http://www.1win72951.help
1win stream meciuri http://1win60823.help/
sportwetten schweiz Gesetz ohne oasis
schnelle auszahlung
kostenlos basketball wetten strategien, Maxwell, ohne einzahlung
pferderennen dresden wetten
Here is my page; wie funktioniert kombiwette
mostbet ставки узбекистан http://www.mostbet09654.help
Music therapy has measurable benefits in dementia care and post-stroke rehabilitation. – https://beautyfarms.slimmestart.nl/ The authors highlight important disparities in access to advanced heart failure therapies. Policy interventions are urgently required. .
1win комиссия mastercard http://1win92486.help
Hello everyone, it’s my first pay a quick visit at this website, and paragraph is genuinely fruitful in favor of me,
keep up posting these types of articles.
köln wettbüro
Here is my web site … wettanbieter mit den besten quoten (Glenda)
Беспылевая установка кондиционера в готовом ремонте.
В СПб работаем с дизайнерскими интерьерами.
Никакой грязи не оставим.
В рассрочку 0% — установка кондиционера в СПб.
Первый взнос 0₽. Одобрение 5 минут.
Не ждите очереди Установим завтра
даже в время белых ночей — выезжаем каждый день по всему СПб и области (до Кудрово без доплат).
japon yap?st?r?c?s? kumastan nas?l c?kar hakk?ndaki bolumu cok sevdim. Suradan okuyabilirsiniz: https://hobiseverler.com/articles/kumastan-japon-yapistirici-nasil-cikar/
welche sportwetten bonus deutschland – Https://fbawinterhills77.com – anbieter
gibt es
wetten spiel abgesagt
my web site – sportwetten tipp