How to switch to/from HTTPS using Apache as a proxy to Tomcat

Posted on by

I’m writing this down because it too me an age to figure out a way of doing this. I have a website which Tomcat is happily serving. Areas of the site require a secure connection so I’m using Spring security to require particular URLs to be accessed over HTTPS. It means that when I access http://example.org:8080/webapp/login, it’ll bump me to https://example.org:8443/webapp/login. Note: Tomcat is setup with the SSL connector and a self signed .keystore see (http://tomcat.apache.org/tomcat-6.0-doc/ssl-howto.html).

I have two vhosts setup in Apache, one for the http://example.org and one for https://example.org. They are both using mod_proxy to ProxyPass and ProxyPassReverse requests to the appropriate Tomcat URL’s. The problem comes when switching to HTTPS from HTTP and vice versa. Ideally I wanted some sort of ProxyPassReverse declaration in my config for http://example.org what would change HTTP headers (that Spring sets) for https://example.org:8443/webapp into https://example.org. Except ProxyPassReverse doesn’t work like that.

Now, I realise I could simply not use Spring to manage which parts of the site should be accessed over HTTPS and which should not…and just setup Apache to redirect as appropriate. I don’t want to do that though, because that makes the task of adding these restrictions a deploy time task, rather than a development time task. I don’t want to risk someone forgetting to add new restrictions when deploying the webapp and I’d much rather the developer added these restrictions when they were working on the task and really thinking about where and when they are needed.

So, how do I solve the problem so that the app can manage its secure-ness and I can setup Apache once and forget about it? The answer is to ProxyPassReverse onto a “special” URL, which when accessed will redirect to the HTTPS (or HTTP) site. For example, if the HTTP site needed to redirect to the HTTPS site, I’d add rules like so to perform the redirect:

    # Proxy a request (from the server) to switch to https onto a special URL "/2https/"
    ProxyPassReverse /2https/ https://example.org:8443/webapp/

    # When a client requests a URL prefixed with "/2https" map it onto the secure site
    RewriteRule ^/2https/(.*)$ https://example.org/$1 [R,L]

…and you’d add something similar to the secure site Apache config. As long as I don’t mount any pages at /2http or /2https I should be ok. Note a couple of things:

  • You’ll need “SSLProxyEngine on” and “RewriteEngine on” and obviously the appropriate Apache modules loaded for these commands.
  • Because of the redirect between HTTP <-> HTTPS you won’t be able to POST data between them directly (I’m not sure why you’d NEED to though)
  • Obviously you’ll need to setup Apache with an SSL certificate…but that is a different story

I should say a special thanks to this random site – from whence the idea actually came from. If anyone has any better ideas on how to do it I’d love to hear them. Please comment below.

12,678 thoughts on “How to switch to/from HTTPS using Apache as a proxy to Tomcat”

  10. Между прочим, если вас интересует Актуальные новости и события Новгородской области, загляните сюда.

    Ссылка ниже:

    https://52media.ru

  12. Коллеги, хороший материал с практическими рекомендациями по выбору SEO для регионального бизнеса. Автор подробно останавливается на локальных ключевых словах, оптимизации контента, работе с картами и каталогами, а также важности отзывов для репутации. Есть блок про ссылочное продвижение и аналитику. Очень структурированно: https://bioice-krasnoyarsk.ru/stati/kak-vybrat-jeffektivnoe-seo-prodvizhenie-dlja-biznesa-v-regione-prakticheskie-rekomendacii/

  17. Между прочим, если вас интересует Новости и события Новосибирской области: всё, что нужно знать, посмотрите сюда.

    Ссылка ниже:

    https://53media.ru

  20. Кстати, если вас интересует Главные новости Приморского края сегодня, посмотрите сюда.

    Ссылка ниже:

    https://media25.ru

  27. Unquestionably believe that which you stated. Your favorite justification appeared to be on the web the easiest thing to be aware of. I say to you, I definitely get annoyed while people consider worries that they just don’t know about. You managed to hit the nail upon the top as well as defined out the whole thing without having side-effects , people could take a signal. Will probably be back to get more. Thanks

  28. Happy Cactus Cactus Cactus Cactus Cactus Cactus Happy Cactus Cactus Cactus Cactus Cactus Cactus Happy Cactus Cactus Cactus Cactus Cactus Cactus Happy Cactus Cactus Cactus Cactus Cactus Cactus Happy Cactus Cactus Cactus Cactus Cactus Cactus Happy Cactus Cactus Cactus Cactus Cactus Cactus https://t.me/hi79602565606/2

  29. 偶然インターネットでショッピングをしていた際、とても魅力的なランジェリーショップを発見することができました。商品一つ一つにオリジナリティがあり、デザインのクオリティがとても高く、見ているだけでもワクワクするようなラインナップになっています。
    様々なテイストのアイテムが豊富に用意されており、可愛らしいデザインからセクシーなデザインまで幅広く取り揃えられているので、自分好みの商品を必ず見つけることができます。素材は肌に優しいで着心地が抜群であり、体に優しくフィットする設計が大変魅力的です。
    全体の品質が非常に高く、どの商品も安定したクオリティを保っている点が信頼につながります。流行に左右されない長く愛用できるデザインが多く、コスパの面でも非常に優れていると感じます。
    購入前の商品情報も分かりやすく記載されており、安心して選択することができました。実際に商品を手に取った際の質感は、サイトの写真以上に上質でで、大変満足しております。
    継続的にリピート購入をしたいと思います。周りの友人や知人にも自信を持っておすすめできるショップですので、これからのさらなる発展と新作アイテムの追加を心より楽しみにしております。

  32. Sweet blog! I found it while surfing around on Yahoo News. Do you have any tips on how to get listed in Yahoo News? I’ve been trying for a while but I never seem to get there! Appreciate it

  38. Ahaa, its good discussion on the topic of this paragraph here at this weblog, I
    have read all that, so now me also commenting here.

  40. Нужны деньги на развитие бизнеса? Автомобиль поможет! Оформляйте займ под ПТС.
    Подробнее – http://zaym-ooo.ru
    займы для ООО в новосибирске
    займы организациям
    автозаймы для ООО в нск

  41. Кстати, если вас интересует Последние новости футбола мгновенно после матчей, посмотрите сюда.

    Ссылка ниже:

    https://livelokomotiv.ru

  42. Excellent weblog right here! Additionally your site lots up fast!
    What web host are you using? Can I get your affiliate hyperlink to your host?
    I desire my site loaded up as fast as yours lol

  46. Excellent site. A lot of useful information here. I am sending it to some friends ans also sharing in delicious. And naturally, thanks for your sweat!

  48. Youre so cool! I dont suppose Ive read something like this before. So good to find any person with some unique ideas on this subject. realy thanks for beginning this up. this web site is something that is needed on the web, someone with a bit of originality. helpful job for bringing something new to the internet!

Leave a Reply

Your email address will not be published. Required fields are marked *

You may use these HTML tags and attributes: <a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <q cite=""> <strike> <strong>