I’m writing this down because it too me an age to figure out a way of doing this. I have a website which Tomcat is happily serving. Areas of the site require a secure connection so I’m using Spring security to require particular URLs to be accessed over HTTPS. It means that when I access http://example.org:8080/webapp/login, it’ll bump me to https://example.org:8443/webapp/login. Note: Tomcat is setup with the SSL connector and a self signed .keystore see (http://tomcat.apache.org/tomcat-6.0-doc/ssl-howto.html).
I have two vhosts setup in Apache, one for the http://example.org and one for https://example.org. They are both using mod_proxy to ProxyPass and ProxyPassReverse requests to the appropriate Tomcat URL’s. The problem comes when switching to HTTPS from HTTP and vice versa. Ideally I wanted some sort of ProxyPassReverse declaration in my config for http://example.org what would change HTTP headers (that Spring sets) for https://example.org:8443/webapp into https://example.org. Except ProxyPassReverse doesn’t work like that.
Now, I realise I could simply not use Spring to manage which parts of the site should be accessed over HTTPS and which should not…and just setup Apache to redirect as appropriate. I don’t want to do that though, because that makes the task of adding these restrictions a deploy time task, rather than a development time task. I don’t want to risk someone forgetting to add new restrictions when deploying the webapp and I’d much rather the developer added these restrictions when they were working on the task and really thinking about where and when they are needed.
So, how do I solve the problem so that the app can manage its secure-ness and I can setup Apache once and forget about it? The answer is to ProxyPassReverse onto a “special” URL, which when accessed will redirect to the HTTPS (or HTTP) site. For example, if the HTTP site needed to redirect to the HTTPS site, I’d add rules like so to perform the redirect:
# Proxy a request (from the server) to switch to https onto a special URL "/2https/"
ProxyPassReverse /2https/ https://example.org:8443/webapp/
# When a client requests a URL prefixed with "/2https" map it onto the secure site
RewriteRule ^/2https/(.*)$ https://example.org/$1 [R,L]
…and you’d add something similar to the secure site Apache config. As long as I don’t mount any pages at /2http or /2https I should be ok. Note a couple of things:
- You’ll need “SSLProxyEngine on” and “RewriteEngine on” and obviously the appropriate Apache modules loaded for these commands.
- Because of the redirect between HTTP <-> HTTPS you won’t be able to POST data between them directly (I’m not sure why you’d NEED to though)
- Obviously you’ll need to setup Apache with an SSL certificate…but that is a different story
I should say a special thanks to this random site – from whence the idea actually came from. If anyone has any better ideas on how to do it I’d love to hear them. Please comment below.
1win az bonus 500 https://1win5762.help
forwardengine.bond – Sleek design, content supports continuous progress and clarity for the user.
Nexa Gateway – Modern design, website is responsive and messages are easy to grasp.
focus journey – Text encourages deliberate action while maintaining clarity.
alliancecore.bond – Sleek design, core messages are easy to follow and navigation feels natural.
trustbeam.bond – Elegant visuals, content is clear and emphasizes reliability to visitors.
VixaroFlow – Layout organized, pages responsive, and checkout completed effortlessly.
capitalunitysynergy.bond – Friendly look, content emphasizes working together effectively.
ironpetaltrading.shop – Pleasant layout, browsing items is simple and checkout feels effortless.
learn about zylavoline – Pages appear instantly, and the purpose is communicated clearly.
woodland bargain spot – The experience feels smooth, from looking through items to finishing checkout.
SpireVistaStore – Clear organization, easy product discovery, and a seamless cart process.
vaultsecure.bond – Well-structured pages, messaging is clear and gives an impression of reliability.
Primary platform link – Easy-to-read content combined with consistent visuals makes a good impression.
creativepulsenetwork.bond – Modern and lively, concepts are easy to follow and presented in a visually appealing way.
growth navigator hub – Wording emphasizes systematic planning and clear, achievable goals.
Свежие вакансии для мужчин в Краснодаре – контракт на СВО Россия 2026 https://vc.ru/1572104
focus center – Strong focus theme gives content a crisp and deliberate feel.
Official Zaviro hub – Content is reliable, layout is intuitive, and users can navigate with ease.
Tandem Link – Clean interface, site structure makes understanding the concept effortless.
продвижение веб сайтов москва продвижение веб сайтов москва .
trustharbor.bond – Friendly layout, site communicates dependable information with partnership in focus.
solidway.bond – Clean navigation, messaging communicates a sense of security and dependability.
linenloamco.shop – Minimalist design, store navigation is simple and item selection is clear.
capitalbondcollective.bond – Clean layout, teamwork message is clear and easy to engage with.
zylavotrustco portal – Well-organized layout and professional style create a sense of reliability.
focuslaneflow.bond – Modern layout, ideas are presented clearly and encourage consistent focus.
professional bond portal – Fast-loading site with organized content that is easy to follow.
MistyBayStore – Smooth navigation, items well-organized, and ordering is straightforward.
direction guide – Content communicates actionable steps and meaningful progress.
ZorivoSpot – Interface tidy, pages open quickly, and checkout process feels straightforward.
trustedunity.bond – Professional look, site conveys confidence while encouraging collaborative effort.
pleasant iris boutique – Overall, the clean presentation makes shopping feel comfortable and enjoyable.
localsprint.click – Color palette felt calming, nothing distracting, just focused, thoughtful design.
localbooster.click – Loved the layout today; clean, simple, and genuinely user-friendly overall.
Action Pathway – Encourages moving from planning to execution with a confident, clear approach.
apexalliant.bond – Modern layout, branding feels confident and content is easy to digest here.
steadypoint.bond – Well-organized site, messaging conveys dependability and clarity for visitors.
digitalsparkjourney.bond – Bright and inviting, ideas are structured clearly and easy to follow.
Explore project – Straightforward pages and well-organized content make the site user-friendly.
locallift.click – Loved the layout today; clean, simple, and genuinely user-friendly overall.
Ridgecrest Hub – Clean, professional design inspires confidence and credibility.
mooncollectiveco.shop – Modern layout, products are easy to find and shopping is stress-free.
Bonded Legacy Focus – Professional feel, navigation is smooth and legacy concept is clear.
clarity stop – Concise phrasing keeps focus on principles while supporting fast action.
structured impact guide – Reads as organized, thoughtful, and goal-oriented.
FernShoreGoods – Calm pages with straightforward navigation and a seamless checkout.
поисковое продвижение сайта в интернете москва поисковое продвижение сайта в интернете москва .
奇思妙探第二季高清完整版采用机器学习个性化推荐，海外华人可免费观看最新热播剧集。
capitalcorehub.bond – Professional interface, content is clear and inspires a sense of stability and focus.