How to switch to/from HTTPS using Apache as a proxy to Tomcat

Posted on by

I’m writing this down because it too me an age to figure out a way of doing this. I have a website which Tomcat is happily serving. Areas of the site require a secure connection so I’m using Spring security to require particular URLs to be accessed over HTTPS. It means that when I access http://example.org:8080/webapp/login, it’ll bump me to https://example.org:8443/webapp/login. Note: Tomcat is setup with the SSL connector and a self signed .keystore see (http://tomcat.apache.org/tomcat-6.0-doc/ssl-howto.html).

I have two vhosts setup in Apache, one for the http://example.org and one for https://example.org. They are both using mod_proxy to ProxyPass and ProxyPassReverse requests to the appropriate Tomcat URL’s. The problem comes when switching to HTTPS from HTTP and vice versa. Ideally I wanted some sort of ProxyPassReverse declaration in my config for http://example.org what would change HTTP headers (that Spring sets) for https://example.org:8443/webapp into https://example.org. Except ProxyPassReverse doesn’t work like that.

Now, I realise I could simply not use Spring to manage which parts of the site should be accessed over HTTPS and which should not…and just setup Apache to redirect as appropriate. I don’t want to do that though, because that makes the task of adding these restrictions a deploy time task, rather than a development time task. I don’t want to risk someone forgetting to add new restrictions when deploying the webapp and I’d much rather the developer added these restrictions when they were working on the task and really thinking about where and when they are needed.

So, how do I solve the problem so that the app can manage its secure-ness and I can setup Apache once and forget about it? The answer is to ProxyPassReverse onto a “special” URL, which when accessed will redirect to the HTTPS (or HTTP) site. For example, if the HTTP site needed to redirect to the HTTPS site, I’d add rules like so to perform the redirect:

    # Proxy a request (from the server) to switch to https onto a special URL "/2https/"
    ProxyPassReverse /2https/ https://example.org:8443/webapp/

    # When a client requests a URL prefixed with "/2https" map it onto the secure site
    RewriteRule ^/2https/(.*)$ https://example.org/$1 [R,L]

…and you’d add something similar to the secure site Apache config. As long as I don’t mount any pages at /2http or /2https I should be ok. Note a couple of things:

  • You’ll need “SSLProxyEngine on” and “RewriteEngine on” and obviously the appropriate Apache modules loaded for these commands.
  • Because of the redirect between HTTP <-> HTTPS you won’t be able to POST data between them directly (I’m not sure why you’d NEED to though)
  • Obviously you’ll need to setup Apache with an SSL certificate…but that is a different story

I should say a special thanks to this random site – from whence the idea actually came from. If anyone has any better ideas on how to do it I’d love to hear them. Please comment below.

12,016 thoughts on “How to switch to/from HTTPS using Apache as a proxy to Tomcat”

  1. 50 Dragons is a popular pokie game from Aristocrat, Naughty or Nice III. How to make the best use of the Sportaza sports betting bonus of 200 euros? Three funny crooks will instantly give you a prize worth double your bet while also triggering the free spins bonus, buran casino app and has established itself as a mighty competitor to the EuroMillions lottery in the European region. Alongside this, which is a pity. Note: This review was last updated on December 02, 2025, and remains valid for approximately 6 months. Casino bonuses, payment methods, and terms may change. Always verify current information on the official BuranCasino website. Here’s the straight-up Aussie rundown on playing at buran-casinos-no marketing fluff, just the stuff you wish you knew before joining. I cover everything from signup hiccups and actual bonus surprises, to getting your dough in and out in Aussie dollars, what to do when support gives you the runaround, and whether the legal mumbo-jumbo stacks up. Seriously, if you’ve been burned by other casinos, or just want to dodge newbie mistakes, this is for you. Quick reality check: casino games are 100% risk and for fun. If you’re chasing a payday, you’ve missed the point.
    https://larsendesign.co.za/how-to-win-at-mfortunecasino-uk-tips-for-uk-players/
    Example: Deposit AUD 100, and you get AUD 200 in bonus funds + 50 spins. Wagering requirements apply, usually around 30x–40x, which is standard across most online casinos. There are a variety of betting markets available for handball, we will discuss some of the best tips and tricks on how to play blackjack. In the new ads, kingmaker casino review and free chips bonus like cascading reels and the unlimited multiplier. The maximum amount may run to AUD 2,500, Vikings Go To Hell. Playn Go have their full suite of games on offer too, buzzluck casino review and free chips bonus Ozwins Jackpots. Casino, Sportsbook. Dear ΒΑΣΙΛΗΣ ΣΚΟΔΡΑΣ,Thank you for taking your time to provide the review. We truly appreciate your feedback.Our goal is to provide the best possible experience to our Customers and we are sorry that your experience on our platform has not been positive.We kindly invite you to contact our support team via our second email: complaints@kingmaker and we’ll make sure to sort out your issue asap! Please provide our support team with your account details and so we could review the details of the case.Sincerely,Kingmaker Team.

  6. Ahaa, its good discussion on the topic of this post here at this web site,
    I have read all that, so at this time me also commenting
    here.

  11. Hi to every one, the contents existing at this website are truly awesome for people experience,
    well, keep up the nice work fellows.

  13. Обновление 1С после реформы НДС для УСН в 2025 году — сделали быстро и без ошибок. Сами разбираться в изменениях не пришлось. Сдали отчёт корректно с первого раза. интеграция 1С с маркетплейсами

  14. Особенно понравился раздел про Актуальные новости и события Амурской области.

    Смотрите сами:

    https://28media.ru

  15. Для тех, кто ищет информацию по теме “Новости и лучшие моменты московского ЦСКА”, там просто кладезь информации.

    Смотрите сами:

    https://topcska.ru

  22. you are in reality a just right webmaster. The site loading speed is amazing.

    It seems that you are doing any unique trick. Moreover, The contents are masterwork.
    you have done a magnificent process in this subject!

  28. وقت بخیر، بنده اخیرا به صورت کاملا تصادفی
    در اینترنت به این سایت آشنا شدم و راستش رو بخواید برام
    جالب بود. مطالبش جذاب بود و خیلی
    کم پیش میاد همچین سایتی پیدا کنم.
    فکر کنم برای کاربرای زیادی مفید باشه.
    اگه دنبالاطلاعات کامل هستن حتما یه نگاهی بندازن.
    در کل خوشم اومد و احتمالا بازدیدش
    می‌کنم

    به شکل کلی

    برای کاربرایی که در جستجو هستن

    بازی‌های شانسی

    در این حوزه فعالیت دارن

    این وبسایت

    کاملا میتونه

    کار راه بنداز باشه

    از طرف دیگه

    پروژه‌هایی مثل

    enfejaronline رسمی

    و

    sibbet محبوب

    توسعه پیدا کردن

    جمع‌بندی اینکه

    ارزش وقت گذاشتن داشت

    و

    به احتمال قوی

    بهش برمی‌گردم

    .

    Alsoo ｖisіt my page مرجع دانشگاهی

  30. Кстати, если вас интересует Актуальные тенденции на рынке недвижимости, загляните сюда.

    Смотрите сами:

    https://flat-news.ru

  32. Oh my goodness! Amazing article dude! Many thanks, However I am going through troubles with your RSS.
    I don’t know the reason why I am unable to join it.
    Is there anybody else getting the same RSS issues?

    Anybody who knows the solution can you kindly respond?
    Thanx!!

  41. در کل ماجرا

    برای اون دسته علاقه‌مندها

    پیش‌بینی مسابقات

    دنبالشن

    این صفحه

    می‌تونه واقعاً

    ارزش بررسی داشته باشه

    جالب‌تر اینکه

    برندهای شناخته‌شده‌ای مثل

    وبسایت еnfｅjaronline

    و

    sibbet معتبر

    توسعه پیدا کردن

    در جمع‌بندی

    تجربه خوبی بود

    و

    در ادامه

    بازدیدش می‌کنم

    Aⅼso visit my page آموزش زبان آلمانی (webvillage.ir)

  43. Have you ever thought about creating an e-book or guest authoring on other sites?
    I have a blog based upon on the same ideas you discuss and would
    really like to have you share some stories/information. I know my visitors would value your work.
    If you’re even remotely interested, feel free to shoot me an e-mail.

  45. My brother recommended I would possibly like this web site.
    He was once entirely right. This publish truly
    made my day. You can not imagine just how a lot time I had spent for this info!
    Thanks!

  46. free online slots nz, united statesn no deposit free spins and casino apps real money australia,
    or new uk paypal casino

    Have a look at my webpage: what does whale mean in gambling (Cruz)

  47. Oh my goodness! Impressive article dude! Thank you, However
    I am encountering troubles with your RSS. I don’t understand why I cannot
    subscribe to it. Is there anybody else getting similar RSS problems?
    Anyone that knows the solution can you kindly respond?

    Thanx!!

  50. Кстати, если вас интересует Советы и новости для успешных инвестиций, посмотрите сюда.

    Вот, делюсь ссылкой:

    https://portalfin.ru

Leave a Reply

Your email address will not be published. Required fields are marked *

You may use these HTML tags and attributes: <a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <q cite=""> <strike> <strong>