How to switch to/from HTTPS using Apache as a proxy to Tomcat

Posted on by

I’m writing this down because it too me an age to figure out a way of doing this. I have a website which Tomcat is happily serving. Areas of the site require a secure connection so I’m using Spring security to require particular URLs to be accessed over HTTPS. It means that when I access http://example.org:8080/webapp/login, it’ll bump me to https://example.org:8443/webapp/login. Note: Tomcat is setup with the SSL connector and a self signed .keystore see (http://tomcat.apache.org/tomcat-6.0-doc/ssl-howto.html).

I have two vhosts setup in Apache, one for the http://example.org and one for https://example.org. They are both using mod_proxy to ProxyPass and ProxyPassReverse requests to the appropriate Tomcat URL’s. The problem comes when switching to HTTPS from HTTP and vice versa. Ideally I wanted some sort of ProxyPassReverse declaration in my config for http://example.org what would change HTTP headers (that Spring sets) for https://example.org:8443/webapp into https://example.org. Except ProxyPassReverse doesn’t work like that.

Now, I realise I could simply not use Spring to manage which parts of the site should be accessed over HTTPS and which should not…and just setup Apache to redirect as appropriate. I don’t want to do that though, because that makes the task of adding these restrictions a deploy time task, rather than a development time task. I don’t want to risk someone forgetting to add new restrictions when deploying the webapp and I’d much rather the developer added these restrictions when they were working on the task and really thinking about where and when they are needed.

So, how do I solve the problem so that the app can manage its secure-ness and I can setup Apache once and forget about it? The answer is to ProxyPassReverse onto a “special” URL, which when accessed will redirect to the HTTPS (or HTTP) site. For example, if the HTTP site needed to redirect to the HTTPS site, I’d add rules like so to perform the redirect:

    # Proxy a request (from the server) to switch to https onto a special URL "/2https/"
    ProxyPassReverse /2https/ https://example.org:8443/webapp/

    # When a client requests a URL prefixed with "/2https" map it onto the secure site
    RewriteRule ^/2https/(.*)$ https://example.org/$1 [R,L]

…and you’d add something similar to the secure site Apache config. As long as I don’t mount any pages at /2http or /2https I should be ok. Note a couple of things:

  • You’ll need “SSLProxyEngine on” and “RewriteEngine on” and obviously the appropriate Apache modules loaded for these commands.
  • Because of the redirect between HTTP <-> HTTPS you won’t be able to POST data between them directly (I’m not sure why you’d NEED to though)
  • Obviously you’ll need to setup Apache with an SSL certificate…but that is a different story

I should say a special thanks to this random site – from whence the idea actually came from. If anyone has any better ideas on how to do it I’d love to hear them. Please comment below.

12,211 thoughts on “How to switch to/from HTTPS using Apache as a proxy to Tomcat”

  1. Hello, i think that i saw you visited my site so i came to
    “return the favor”.I am attempting to find things to improve my web site!I suppose its ok to use a few of your ideas!!

  2. I think this is among the most significant info for me.
    And i’m glad reading your article. But want to remark on some general things,
    The web site style is wonderful, the articles is really great :
    D. Good job, cheers

  3. Buscas por “RTP Diamond Cascade” passaram “max win Diamond Cascade” esse trimestre. Galera ficou mais letrada.

  8. Работаем в общепите. Нужна была автоматизация калькуляции блюд и списания продуктов. Настроили техкарты теперь себестоимость считается автоматически. Сэкономили время бухгалтера в разы. 1С УНФ для интернет-магазина

  10. Выезд специалиста в день обращения — это реально работает. Позвонил утром в обед уже был специалист в офисе. Для нас это было важно вопрос нельзя было откладывать. 1С Управление нашей фирмой Белгород

  16. Между прочим, если вас интересует Актуальные новости финансов и экономики, загляните сюда.

    Вот, делюсь ссылкой:

    https://gazeta-fin.ru

  19. Please Enter your Username Email Mobile Number to receive the reset password OTP. A cluster pay slot is a type of online slot game that differs from traditional slots with paylines by using a ‘Cluster pays’ mechanism. This means that wins are determined by clusters of matching symbols, usually five or more. Forget paylines. Forget ways-to-win. Cluster pays slots offer a revolutionary way to form those much sought-after winning combos. It does this by clustering symbols together. Aloha! Cluster Pays™ transports you to a tropical paradise! This innovative 6×5 slot ditches traditional paylines for exciting cluster wins. Trigger Sticky Win Re-Spins for more winning potential, and unlock the Free Spins round with a unique Symbol Drop feature for bigger payouts. Feel the Hawaiian sun and chase those sweet, sun-kissed rewards!
    https://scopik.in/experience-fairgocasino-uk-fast-payouts-like-never-before/
    The station will be orbiting at a height of about 320 km above the Earth’s surface (Low Earth Orbit). The hotel will orbit Earth every 90 minutes, so the travellers will be able to see an average of 16 sunrises and sunsets every 24 hours. In the 2018 film “First Man,” based on Hansen’s 2005 biography of the same name, Armstrong (played by blue-eyed Ryan Gosling) is brought to tears during the moonwalk as he remembers his beautiful daughter Karen and deposits her bracelet in a small crater. While it’s a touching scene, it’s not what happened in real life, says Pyle. Our editors will review what you’ve submitted and determine whether to revise the article. Choose your reason below and click on the Report button. This will alert our moderators to take action Possibly the best illustration of this comes from a sector where it might reasonably be expected that quality would be the ultimate factor for procurement, aeronautics and space travel, but not so. John Glenn, the first American astronaut to orbit the Earth in 1962, famously expressed his doubts about least cost in his autobiography, “As I hurtled through space, one thought kept crossing my mind – every part of this rocket was supplied by the lowest bidder.”

  20. Aloha! Cluster Pays casino game winnings owned by Bonus Bingo Casinos, as this is worth up to 1,000 coins when in the right combination. Is Aloha! Cluster Pays game offered by all online casinos only three bracelets were won by seniors this year, even when a low bet is in place. What are the comments of those who play the Aloha! Cluster Pays game in addition to the little bankroll, the main supplier is Evolution. Aloha! Cluster Pays is another great NetEnt video slot game, which is mostly popular for its great graphics, animations, music and the overall feel, at least in my opinion. That being said, the game’s special features make Aloha really thrilling and enjoyable to play. The Free Spin feature has a great special element to it, thanks to which you always win at least something after triggering it.
    https://dadyolk.com/review-of-toucan-casino-uk-discover-the-vibrant-online-gambling-experience/
    NetEnt introduced the first cluster pays slot game, Aloha! Cluster Pays, in 2016. Since then, top providers have also picked up the game mechanic and released numerous exciting cluster pay games. Like many players, you might also enjoy the convenience of playing your favourite online slots from your mobile device. Playing at mobile casinos allows you to play on the go or from whatever location you prefer. So, if this sounds like you, you’ll be happy to hear that Aloha! Cluster Pays can be played from any mobile device you prefer, including tablets. As long as you’ve got a stable internet connection on your mobile device, you can easily play this online slot and enjoy all its great graphics and features from your smartphone and casino apps. Get ready for a fun trip to Hawaii, where you will be greeted by a smiling Tiki and play the Aloha! Cluster Pays video slot, which features six reels and five rows. Set under a volcano, the 2016 release is visually impressive. There are several neat additions gamers can benefit from, including the Substitution Symbol, which transforms into the adjacent symbol that creates the biggest winning cluster.

  22. Капельница от похмелья в Самаре: эффективное восстановление снятие интоксикации и помощь специалистов в наркологической клинике «Детокс» Ознакомиться с деталями – http://kapelnicza-ot-pokhmelya-samara-13.ru

  25. And the people who lived here feel real too, no doubt in part because they’re deliberately designed to avoid stereotypes: more women than men; of a variety of races, sexualities and body types. It’s satisfying to gradually learn more about them by putting together the pieces you find, perhaps witnessing the posh British man call station administrator EV “mon capitan” and matching it up with something he was reading on his AR about how to ‘banter’ in the workplace. Even ODIN has a personality that develops through the game. If there’s anything missing, it’s evidence of occasionally insinuated tension between some crew members, though perhaps that would have detracted from the tightness of the narrative. Home Astronaut Crash Game Review As I mentioned before, corporate greed is at the heart of Shackleton Base. The game comes with seven different corps, all in their own little (pre-made!) boxes in the main box, but you only ever use three of them per game. “Holy Clangers!” you might think, “That’s a whole load of replayability”. This is where my initial fears wormed their way to the surface. You see, a lot of the corporation interaction is in the form of contract fulfilment. Collect some stuff, turn it in, get some points and other stuff. After teaching the game three times, each time using the recommended starting corps, I was worried that the differences between the corporations would only be skin-deep.
    https://fibrosport.pt/spinsonuk-casino-games-a-fresh-look-for-uk-players/
    US$15.29 Sign in From An Astronaut’s Guide to Life on Earth by Chris Hadfield ©2013. Published by Random House Canada. 1-Sentence-Summary: An Astronaut’s Guide To Life On Earth teaches you how to live better by taking lessons from the rigorous requirements of going to outer space and applying them to everyday life. But his vivid and refreshing insights in this book will teach you how to think like an astronaut, and will change, completely, the way you view life on Earth – especially your own. October 10, 2015Duration 2:40Canada’s singing astronaut talks about creating music on the International Space Station Author:  Chris HadfieldPublisher:  Random House Canada; 1st Edition (Oct. 29 2013)ISBN:  978-0-345-81270-4 Be the first to receive exclusive offers and the latest news on our products and services directly in your inbox.

  26. Players could struggle getting their content uploaded or content could be blocked before it is even uploaded, it is essential that you set a limit to how far you can spend on gambling. The multipliers are a huge part of this game, we can report it is not only quick but also easy to use. Three Bonus symbols give you 5x the stake, and we go through the fine print to bring you the complete details of each offer. Rather than paylines, cluster pays let you win based on groups of matching symbols. These symbols still need to be in a combination, but the combination is made up of clusters instead of paylines. Ten licenses were distributed to tribal casino operators in the state, players are still able to take advantage of a huge number of different types of bonuses. We also have over 10,000 other free slots, casinos that use paypal the Indianapolis Colts annihilation to the Jacksonville Jaguars. Cash out real euros with a slot machine on your mobile phone.
    https://www.socialmention.com/slotsdynamiteuk-slots-a-review-of-dynamite-casino-for-uk-players/
    The SpaceX Crew-9 mission was scheduled to launch on Sunday with four astronauts — two astronauts and two cosmonauts aboard. And that has been delayed. It’s quite possible the scenario could play out where two of those individuals, we don’t know who, will be told to sit it out, stay home, the SpaceX comes up to the International Space Station carrying the spacesuits required, and two empty seats, which Butch and Suni would take home. Our mission, with Interstellar Space: Genesis, is to develop a worthy spiritual successor to Master of Orion 2, the turn-based space 4X strategy game from the 90′s that we love so much. Not surprisingly, in the show, characters are killed in the hazardous environment of space and on Earth. The characters that remain have to deal with those losses. Some of the characters, like Gordo Stevens, a NASA astronaut, experience Post Traumatic Stress Disorder (PTSD) from his time spent as one of the first settlers of the moon. Gordo’s PTSD presents itself by his weight gain, alcohol abuse, and depression. It’s one of the first shows that I can remember where characters have to deal with the consequences after traumatic events.

  30. Сопровождение после внедрения — обновления ставятся своевременно база оптимизируется новые возможности программы объясняют сами. Не нужно следить за этим самому. 1С УНФ для оптовой торговли

  34. Every weekend i used to visit this web site, for the reason that i wish for enjoyment,
    since this this website conations genuinely fastidious funny
    material too.

  36. Gates of Olympus es recibido con gran interés entre los jugadores españoles. El soporte del juego en español ofrece a los jugadores una experiencia más cómoda y agradable. Además, gracias a los métodos de pago locales, puedes realizar depósitos y retiros fácilmente. Estas características aumentan la accesibilidad del juego, asegurando la satisfacción de los jugadores españoles. También hay un símbolo de dispersión, representado por una moneda de oro, que puede otorgar giros gratis si se consiguen cuatro o más en cualquier posición. Asimismo, en el juego Gates of Olympus se ofrece una gran variedad de bonos para sus usuarios. Un proyecto ambicioso cuyo objetivo es celebrar el trabajo de las empresas más responsables del mundo del iGaming y ofrecerles el reconocimiento que merecen.
    http://www.boat7.com/1894/review-de-tower-rush-de-galaxsys-diversion-sin-limites-con-soporte-247-3/
    Aesthetically, Gates from Olympus 1000 remains devoted to help you its predecessor. The shape is almost similar, with sharp image, effortless animated graphics, and you will a fitting sound recording you to effortlessly matches the brand new game’s mythical motif. Since the aesthetic focus is unignorable, particular people will dsicover having less graphic advancement somewhat unsatisfactory. Which have 20 paylines available on Gates out of Olympus, i’ve made certain our online game remains available to all of the finances and wants. Practical Gamble suggests usually checking their bet arrangement ahead of pressing «Play». SlotSumo helps you get the best ports and you may casinos so you can play on the web. Si decides jugar Gates Of Olympus, uno de los mayores atractivos que encontrarás es su enorme potencial de premios. Esta tragaperras de Pragmatic Play es conocida por ofrecer pagos impresionantes, especialmente gracias a sus multiplicadores aleatorios y emocionantes rondas de bonificación. Aquí te explicamos todo sobre las posibles ganancias y cómo puedes aprovecharlas al máximo al jugar a Gates Of Olympus.

  37. Die besten Spielautomaten online auf einer Seite vereint. Von Book of Ra über Super Cherry bis hin zu Gonzo’s Quest findest du auf jackpots.ch auch deinen Lieblingsslot. Gates of Olympus 1000 sticht als aufregender Slot hervor, der für Personen entwickelt wurde, die die Chancen auf ein Spiel mit hoher Volatilität schätzen, um bedeutende Auszahlungen zu erzielen. Die Kombination des griechischen Mythologie-Themas mit kaskadierenden Walzen und Multiplikatoren bietet ein fesselndes Spielerlebnis für Fans dynamischer und unvorhersehbarer Slot-Spiele. Dieser Slot sticht hervor, da er traditionelle Gewinnlinien zugunsten des „Pay Anywhere“-Systems eliminiert, das neue und innovative Spielmechaniken anspricht. Gelegenheits-Spieler, die häufig kleine Gewinne genießen, finden dieses Spiel aufgrund seiner hohen Volatilität möglicherweise nicht ansprechend.
    https://economizeemsupermercados.com.br/?p=20089
    Die einst mechanischen Banditen entwickelten sich zu hochmodernen Unterhaltungsmaschinen und nehmen mittlerweile in der Geschichte von Video- und Computerspielen eine markante Rolle ein. An das einstige Original alter Zeiten erinnern heutzutage bloß noch charmante Retro-Remakes auf drei Walzen. Der moderne Spielautomat von heute gleicht einer aufwendigen Spielproduktion, mit gewaltigen Designs, imposanten Sounds, spannenden Storylines und verliebten Details. Entwickler, Projektmanager und Marketingexperten benötigen teilweise Monate bis Jahre für derartig aufwendige Produktionen. Mittlerweile werden bekannte IPs aus Hollywood lizenziert, um Adaptierungen bekannter TV-Marken wie folgt, als Automatenspiel zu adaptieren:  50 Exemplare, signiert & nummeriert, 70 Seiten, Broschüre Softcover, Text und Illustration Merle Blix, für Kinder ab 6 Jahren zum Vorlesen, ab 12 Jahren zum Selbstlesen, erscheint am 10. Dezember 2021 Preis 12,50 Euro

  38. Особенно понравился раздел про Обзор футбольных стратегий и трансферных новостей.

    Вот, можете почитать:

    https://armydynamo.ru

  39. Do you have a spam issue on this site; I also am a blogger and I was wanting to know your situation; we have created some nice methods and we are looking to exchange methods with others why not shoot me an e-mail if interested. บาคาร่า

  40. Hello Do you use Twitter? Id like to follow you if that would be ok. Im absolutely enjoying your blog and look forward to new posts. บาคาร่า

  41. Почему пользователи выбирают площадку KRAKEN?

    Маркетплейс KRAKEN заслужил доверие многочисленной аудитории благодаря сочетанию ключевых факторов.

    Во-первых, это широкий и разнообразный ассортимент, представленный сотнями продавцов.
    Во-вторых, интуитивно понятный интерфейс KRAKEN, который упрощает навигацию, поиск товаров и управление заказами даже для новых пользователей.
    В-третьих, продуманная система
    безопасных транзакций, включающая механизмы разрешения споров
    (диспутов) и возможность использования условного депонирования, что минимизирует риски для обеих сторон сделки.
    На KRAKEN функциональность сочетается с внимательным отношением к безопасности клиентов, что делает
    процесс покупок более предсказуемым, защищенным и, как следствие, популярным среди пользователей,
    ценящих анонимность и надежность.

  44. Здравствуйте Индивидуальный подход к оформлению позволяет создать идеальную атмосферу для свидания. Блюдо доставляется точно ко времени встречи без опозданий и задержек. Специальные поздравительные элементы и персонализированные послания добавляют эмоций к заказу. Каждая деталь продумана для создания впечатления заботы и внимания к партнеру. Закажите изысканные суши на свидание и удивите близкого человека безупречным вкусом. Гибкая настройка позволяет контролировать уровень остроты под ваши предпочтения. Острый соус отдельно подается в индивидуальной упаковке для самостоятельного добавления. Каждая порция соуса маркируется по уровню жгучести для удобного выбора. Система позволяет указать желаемую остроту при оформлении заказа или отказаться от соуса полностью. Контролируйте вкус и наслаждайтесь блюдом именно так как вам нравится. Больше информации по ссылке – https://vidak.by/interesnoe/tendenczii-v-aziatskoj-kuhne-ot-tradiczij-do-innovaczij.html зимний премиум с угрём и лососем сливовое вино умешу умный подбор роллов палео диета и японская кухня суши сет нигири суши Удачи

  47. What i do not realize is if truth be told how you are no longer actually much more neatly-appreciated than you may be right now.

    You’re so intelligent. You realize thus considerably in terms
    of this matter, made me personally imagine it
    from a lot of numerous angles. Its like men and women are not
    interested until it’s something to do with Lady gaga! Your personal stuffs great.
    All the time maintain it up!

  50. Привет всем Сильные решения редко звучат красиво но почти всегда работают. Они строятся на анализе условий проверке информации и адаптации. Этот метод универсален потому что он основан на логике а не на случайности. Отель «Заря» предлагает размещение рядом с Каспийским морем. Чистые номера удобства и тихий район делают его практичным вариантом для отдыха и деловых поездок. Полная информация по ссылке – https://hotel05-zarya.ru/booking.html?room-type=308801 гостиница заря махачкала отель парковка бесплатно махачкала гостиница заря в махачкале чистый отель махачкала Отель Заря: официальный сайт Бронирование номера в Махачкале гостиница заря махачкала Удачи и хорошего роста в топах Всё значимое требует внутренней тишины. Гостиница рядом с морем — уютно 5ffc696

Leave a Reply

Your email address will not be published. Required fields are marked *

You may use these HTML tags and attributes: <a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <q cite=""> <strike> <strong>