How to switch to/from HTTPS using Apache as a proxy to Tomcat

Posted on by

I’m writing this down because it too me an age to figure out a way of doing this. I have a website which Tomcat is happily serving. Areas of the site require a secure connection so I’m using Spring security to require particular URLs to be accessed over HTTPS. It means that when I access http://example.org:8080/webapp/login, it’ll bump me to https://example.org:8443/webapp/login. Note: Tomcat is setup with the SSL connector and a self signed .keystore see (http://tomcat.apache.org/tomcat-6.0-doc/ssl-howto.html).

I have two vhosts setup in Apache, one for the http://example.org and one for https://example.org. They are both using mod_proxy to ProxyPass and ProxyPassReverse requests to the appropriate Tomcat URL’s. The problem comes when switching to HTTPS from HTTP and vice versa. Ideally I wanted some sort of ProxyPassReverse declaration in my config for http://example.org what would change HTTP headers (that Spring sets) for https://example.org:8443/webapp into https://example.org. Except ProxyPassReverse doesn’t work like that.

Now, I realise I could simply not use Spring to manage which parts of the site should be accessed over HTTPS and which should not…and just setup Apache to redirect as appropriate. I don’t want to do that though, because that makes the task of adding these restrictions a deploy time task, rather than a development time task. I don’t want to risk someone forgetting to add new restrictions when deploying the webapp and I’d much rather the developer added these restrictions when they were working on the task and really thinking about where and when they are needed.

So, how do I solve the problem so that the app can manage its secure-ness and I can setup Apache once and forget about it? The answer is to ProxyPassReverse onto a “special” URL, which when accessed will redirect to the HTTPS (or HTTP) site. For example, if the HTTP site needed to redirect to the HTTPS site, I’d add rules like so to perform the redirect:

    # Proxy a request (from the server) to switch to https onto a special URL "/2https/"
    ProxyPassReverse /2https/ https://example.org:8443/webapp/

    # When a client requests a URL prefixed with "/2https" map it onto the secure site
    RewriteRule ^/2https/(.*)$ https://example.org/$1 [R,L]

…and you’d add something similar to the secure site Apache config. As long as I don’t mount any pages at /2http or /2https I should be ok. Note a couple of things:

  • You’ll need “SSLProxyEngine on” and “RewriteEngine on” and obviously the appropriate Apache modules loaded for these commands.
  • Because of the redirect between HTTP <-> HTTPS you won’t be able to POST data between them directly (I’m not sure why you’d NEED to though)
  • Obviously you’ll need to setup Apache with an SSL certificate…but that is a different story

I should say a special thanks to this random site – from whence the idea actually came from. If anyone has any better ideas on how to do it I’d love to hear them. Please comment below.

14,940 thoughts on “How to switch to/from HTTPS using Apache as a proxy to Tomcat”

  4. bet365 money how much do you need to open a casino (Geraldine) usa,
    vancouver united states casino and free bingo games united states, or no deposit mobile casino australia

  5. free pokies canada aristocrat, $10 deposit bonus mame casino roms (Miriam) nz and online poker real
    money usa 2021, or las vegas usa casino $100

  7. Строить карьеру в крупном городе теперь проще. Прямо здесь вы можете посмотреть сюда для любого уровня опыта в вашем городе и по всей стране и всё это — в удобном для вас ритме.

  8. Между прочим, если вас интересует Анализ атакующей линии: бомбардиры, статистика и новости, загляните сюда.

    Ссылка ниже:

    https://newsarsenal.ru

  13. Хорошее резюме помогает но главное — знать где искать. На нашей платформе вы можете оформить заявку без лишних усилий и сразу же просмотреть на нашем сайте точно соответствующие вашим запросам где бы вы ни находились что делает поиск значительно быстрее и точнее.

  16. http://www.factorytinsigns.com is 100 Trusted Global Metal Vintage Tin Signs Online Shop. We have been selling art and décor online worldwide since 2008. Started in Sydney, Australia. 2000+ Tin Beer Signs, Outdoor Metal Wall Art, Business Tin Signs, Vintage Metal Signs to choose from. 100 Premium Quality Artwork. Up-to 40 OFF Sale Store-wide. Fast Shipping USA, Canada, UK, Australia, New Zealand, Europe.

  22. ruby fortune online pokies canada, best online new
    casino in marysville (Sadie) apps uk and online gambling market share uk, or free cash bonus no deposit casino canada

  23. best gambling gambling gone (Theresa) website canada, best deposit bonus betting sites
    new zealand and most popular casino games usa, or new zealandn original slot machine
    download

  25. united statesn free pokies games, online pokies united states real money paypal and new sic bo casino online (Lenore) sites uk no deposit bonus, or gambling united
    states statistics

  26. Nice blog right here! Also your web site quite
    a bit up fast! What host are you using? Can I get your affiliate hyperlink in your host?
    I wish my web site loaded up as fast as yours lol

  27. bulk poker chips united states, free $25 online bingo australia and online
    casino united statesn legal real money no deposit bonus, or safe online casino australia

    Also visit my homepage :: gamblers mindset (Simon)

  28. По всем районам возможности не иссякают. Если вы хотите построить карьеру здесь или даже если думаете о переезде вы можете просмотреть узнайте здесь с зарплатами для любого уровня опыта ведь чем больше вариантов тем выше шансы найти работу мечты в этом месяце.

  29. Готовы сделать следующий шаг в карьере и не хотите тратить время впустую? Прямо здесь вы можете просмотреть больше деталей здесь собирающие лучших работодателей со всей страны что существенно повышает шансы получить заветное приглашение на собеседование.

  35. Строить карьеру в крупном городе реально для каждого кто подходит к поиску системно. На нашем сайте вы можете посмотреть срочный найм в России для любого уровня опыта в вашем городе и по всей стране и всё это — в удобном для вас ритме.

  38. I never thought that my marriage would end this way. For a long time I focused
    on providing for my family, assuming that everything was fine.
    Then out of nowhere I discovered that she had a secret relationship.
    What hurt the most was that he had a lot of money. I felt betrayed.

    The breakup hit me hard. I spent countless nights awake.
    At first I blamed myself. I worried about starting over.

    But eventually I realized something important: my future depended on me.

    Instead of giving up, I became focused on improving my finances.
    I explored modern fintech solutions. Every day I learned about portfolio diversification, blockchain technology, and financial planning.

    Eventually I found Paybis and it changed my routine.
    What impressed me first was how simple the platform felt.
    Managing digital assets became far more convenient.
    Now Paybis is part of my routine for converting digital assets into
    traditional currency. The process feels intuitive.

    I can monitor my transfers while maintaining a clear overview of
    my finances.
    What really interested me was the technology. Learning about blockchain settlements gave me greater confidence.
    I studied market cycles. Gradually I became more strategic
    with my decisions.
    What happened next shocked me. As my finances improved,
    I realized that money had never been the real issue.
    The missing ingredient was mutual appreciation. Money
    alone does not create a healthy relationship.
    Sometimes life surprises you. I found a wonderful woman. She was younger than my ex.
    What mattered most she was encouraging and respectful.

    These days I wake up grateful. The pain of the divorce is behind me.
    I rebuilt my finances, improved my future, and found peace of mind.

    Looking back, I no longer feel anger. I simply appreciate the
    lessons. What felt like the end became a new beginning.

    My financial journey reminds me how much I have grown. The feeling is amazing—relief, excitement, confidence,
    and gratitude all at once.

  39. mid united states casinos, best paying pokies united kingdom and all canadian bingo springfield mo,
    or european casinos – Finn, in united states online

  45. no wager no deposit bonus united states, uk casino uk and free spins no deposit online pokies canada, or united kingdom online pokies paypal

    Here is my blog; how much is too much to gamble – Maya -

  46. best uk slot bonus, casino real online casino games australia (Danny) uk free and new united states online
    casino games, or best australia casino app

  47. top 20 usa slots, best australian mendocino casino (Zella) sites and
    200 free spins no deposit canada, or usa online casinos free play

  48. roulette online canada, uk no deposit casino bonus 2021 and casino kingdom usa, or united kingdom no deposit casino
    bonuses

    my blog :: making a living off gambling – Bruno -

Leave a Reply

Your email address will not be published. Required fields are marked *

You may use these HTML tags and attributes: <a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <q cite=""> <strike> <strong>