How to switch to/from HTTPS using Apache as a proxy to Tomcat

Posted on by

I’m writing this down because it too me an age to figure out a way of doing this. I have a website which Tomcat is happily serving. Areas of the site require a secure connection so I’m using Spring security to require particular URLs to be accessed over HTTPS. It means that when I access http://example.org:8080/webapp/login, it’ll bump me to https://example.org:8443/webapp/login. Note: Tomcat is setup with the SSL connector and a self signed .keystore see (http://tomcat.apache.org/tomcat-6.0-doc/ssl-howto.html).

I have two vhosts setup in Apache, one for the http://example.org and one for https://example.org. They are both using mod_proxy to ProxyPass and ProxyPassReverse requests to the appropriate Tomcat URL’s. The problem comes when switching to HTTPS from HTTP and vice versa. Ideally I wanted some sort of ProxyPassReverse declaration in my config for http://example.org what would change HTTP headers (that Spring sets) for https://example.org:8443/webapp into https://example.org. Except ProxyPassReverse doesn’t work like that.

Now, I realise I could simply not use Spring to manage which parts of the site should be accessed over HTTPS and which should not…and just setup Apache to redirect as appropriate. I don’t want to do that though, because that makes the task of adding these restrictions a deploy time task, rather than a development time task. I don’t want to risk someone forgetting to add new restrictions when deploying the webapp and I’d much rather the developer added these restrictions when they were working on the task and really thinking about where and when they are needed.

So, how do I solve the problem so that the app can manage its secure-ness and I can setup Apache once and forget about it? The answer is to ProxyPassReverse onto a “special” URL, which when accessed will redirect to the HTTPS (or HTTP) site. For example, if the HTTP site needed to redirect to the HTTPS site, I’d add rules like so to perform the redirect:

    # Proxy a request (from the server) to switch to https onto a special URL "/2https/"
    ProxyPassReverse /2https/ https://example.org:8443/webapp/

    # When a client requests a URL prefixed with "/2https" map it onto the secure site
    RewriteRule ^/2https/(.*)$ https://example.org/$1 [R,L]

…and you’d add something similar to the secure site Apache config. As long as I don’t mount any pages at /2http or /2https I should be ok. Note a couple of things:

  • You’ll need “SSLProxyEngine on” and “RewriteEngine on” and obviously the appropriate Apache modules loaded for these commands.
  • Because of the redirect between HTTP <-> HTTPS you won’t be able to POST data between them directly (I’m not sure why you’d NEED to though)
  • Obviously you’ll need to setup Apache with an SSL certificate…but that is a different story

I should say a special thanks to this random site – from whence the idea actually came from. If anyone has any better ideas on how to do it I’d love to hear them. Please comment below.

14,953 thoughts on “How to switch to/from HTTPS using Apache as a proxy to Tomcat”

  1. Для тех, кто ищет информацию по теме “Свежие новости Томской области и мира”, там просто кладезь информации.

    Вот, можете почитать:

    https://chuk87media.ru

  2. I have been browsing online greater than three hours these days, yet I by no means found any fascinating article like yours. It is pretty value sufficient for me. In my opinion, if all website owners and bloggers made just right content material as you did, the internet might be much more useful than ever before.

  3. Вызвать нарколога на дом следует при ухудшении самочувствия после алкоголя при длительном запое выраженном похмелье отравлении спиртным признаках абстиненции тревоге страхе бессоннице сильной слабости нарушениях поведения и невозможности самостоятельно прекратить употребление. Чем дольше человек находится в запое тем выше риск осложнений для здоровья поэтому откладывать вызов врача опасно. Выяснить больше – narkolog-na-dom-moskovskoj-oblasti

  10. Seja para uma recolocacao a capital fluminense esta cheia de chances. No nosso portal voce pesquisa as vagas no Brasil hoje por area e faixa salarial e candidata-se rapidinho — assim voce descobre por que tantos profissionais ja conseguiram o emprego ideal com as nossas ferramentas.

  11. Нарколог на дом в Балашихе нужен когда человек после алкоголя запоя отравления абстинентного синдрома или употребления наркотиков не может самостоятельно восстановиться и нуждается в медицинской помощи. Вызов врача на дом позволяет быстро оценить состояние пациента провести осмотр подобрать препараты назначить лекарства поставить капельницу и определить возможно ли лечение в домашних условиях или требуется госпитализация в стационаре. Исследовать вопрос подробнее – http://narkolog-na-dom-balashiha13-4.ru

  12. Вывод из запоя в клинике и на дому в Сочи: лечение алкоголизма капельница детоксикация помощь нарколога круглосуточно анонимно и безопасно. Подробнее – срочный вывод из запоя сочи

  13. В Балашихе выездной формат удобен для семьи если близкого нельзя быстро доставить в клинику или состояние пациента ухудшается на фоне длительного запоя. Дом становится местом первичной стабилизации когда врач видит что капельница вывод из запоя консультация снятие интоксикации и дальнейшие рекомендации могут быть проведены безопасно. Если состояние тяжелое нарколог объясняет почему нужна госпитализация стационар дополнительные обследования и круглосуточный медицинский контроль. Ознакомиться с деталями – нарколог на дом

  16. casino in phuket, las vegas casino online usa and can us
    citizens play online poker in united states, or how to play pokies in canada

    Feel free to visit my blog post: elko casinos open (Veola)

  17. united kingdom poker 90 s, real online gambling disadvantages (Rowena) money casino canada and play slots for real money usa, or free spins
    casino no deposit bonus united states

  18. Особенно понравился раздел про Актуальные новости и жизнь районов Владимирской области.

    Вот, делюсь ссылкой:

    https://media33vladimir.ru

  24. top australian online pokies, non gamstop casinos
    uk and craps in usa mr burns casino britannia (Cecile), or play slots
    online for real united states

  25. Across every neighborhood opportunities never stop coming. If youre looking for work in city or even if youre open to exploring other areas you can find find a job in the United States with salaries for every experience level because the more options you have the better your chances of landing the right job this month.

  29. Starting fresh professionally is more common than you think. This is where our platform makes a difference: you browse career search USA sorted by industry and experience level and apply to as many roles as you want whenever it suits you.

  33. mehrfach kombiwette rechner

    Stop by my web-site :: basketball wetten über/unter strategie; Hans,

  34. I have recently started a blog, the information you offer on this website has helped me greatly. Thanks for all of your time & work.

  38. From downtown to the suburbs hiring activity stays strong. When it comes to the city job market or even if you want to check out other regions you can browse find a career in America across all kinds of industries because the more options you have the better your chances of landing the right job this month.

  41. las vegas usa casino reviews, how many the top
    online pokies and casinos in australia and online casino coming to kings
    mountain nc (Jarrod) groups
    usa, or australian top online casino

  42. По теме “Актуальные новости и герои Ульяновской области”, есть отличная статья.

    Смотрите сами:

    https://73media.ru

  46. Наркологическая помощь на дому особенно важна при алкогольной интоксикации длительном запое сильной слабости тревоге рвоте нарушении сна высоком давлении треморе спутанности поведения и риске осложнений. Врач нарколог приезжает по адресу проводит диагностику уточняет длительность употребления алкоголя наличие хронического алкоголизма опыт лечения противопоказаний заболеваний сердца печени нервной системы и других органов. После этого специалист выбирает безопасную схему терапии. Подробнее можно узнать тут – телефон нарколога на дом

  47. list of usa online casinos in southeast asia (Shari) a to z, 888 poker withdrawal united states and
    gambling legislation australia, or bingo uk online

  50. is online poker legal in united states, new online casino united states 2021 and what casinos are open in lake
    charles la (Dee) poker sites are
    legal in australia, or real money pokies canada
    safe and secure

Leave a Reply

Your email address will not be published. Required fields are marked *

You may use these HTML tags and attributes: <a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <q cite=""> <strike> <strong>