-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Dino,
On 11/16/18 11:24 AM, Dino Edwards wrote: > Hello, > > I have an interesting issue with Tomcat. If I click/or paste a > HTTPS link in the browser to an application served by Tomcat, it > redirects to http instead of https. If I manually change the > http:// to https:// in the browser the application comes up with no > problems. Obviously it's not ideal, cause this application sends > out emails with https addresses that end-users are supposed to > simply click and get to the application. > > My current setup, I have Apache proxying to Tomcat 7 like this: > > <VirtualHost *:443> ProxyRequests Off > > SSLEngine on SSLCertificateFile .........cer SSLCertificateKeyFile > .......key SSLCertificateChainFile ......cer SSLProtocol -all > +TLSv1.2 SetEnvIf User-Agent ".*MSIE.*" nokeepalive > ssl-unclean-shutdown <Proxy *> Order deny,allow Allow from all > </Proxy> > > ProxyPass /app http://localhost:8080/app ProxyPassReverse /app > http://localhost:8080/app ProxyTimeout 3600 > > ..... > > </VirtualHost> This looks like an old config. Are you using Apache 2.2? 1. I don't see ServerName to identify the VirtualHost for SNI 2. You are using "Order" instead of "Require" Are you sure you don't have any other <VirtualHost> which is performing any proxying? > This used to work with Tomcat 6, but obviously something has > changed with Tomcat 7. > > I would appreciate some assistance on this Can you post your <Connector> configuration for your port 8080 connector ? If this is a one-box-wonder, do you actually need httpd? Just checking.. . - -chris -----BEGIN PGP SIGNATURE----- Comment: GPGTools - http://gpgtools.org Comment: Using GnuPG with Thunderbird - https://www.enigmail.net/ iQIzBAEBCAAdFiEEMmKgYcQvxMe7tcJcHPApP6U8pFgFAlvu8w4ACgkQHPApP6U8 pFhg6Q//Q7JjX40+lYhXuHiDLVKZu39rvtgUpdKOMms6/iidOG1pwtjDHhXdm8AO yVbQ6nhKaTJZZZAJ8Npp5ojuA3eeNkHUMfFPBLDeWk4SqFdnIJOnmsSwHHocX4QX RAHUdKoJ7PsuqAqMf5p7jOojy0IzUwbPG/KiDmgsr59BsiRIcOaVYbU1tbcuRVzW KPeK/WNhP0E33AkuRIn9CfkE+4NCdOmPqFp5fpy4iImNrbXD9mkbJJg+qZ43vsUg TrMMFssWj+pp2GlIq2UB6Ydvl6qcKtVDGGBfGcKZA6xULKnKMCW/SeQe2tl3TqLs UjHlCOmEzB8hu6TJh59991ecgom7mUisAupkGn9tPOAVU2wDanbvcdqOX8KrPU4s 1qSjTe2Fa1tz494+/MvBxiyLL6/BKlO3zjtw+QhFW2IgAl1QILJqpvY2MFlpQRBR RJY8zIof0u1Y+2dlgHGl8mD7siq6N/34acRSSQEYZtRAtJbn6n/xJR56icguDf6g FlmKYu0CQNLBLReBUSG3eY4nOX4QcPUvsooHZxzqhdp3DxuQUhgLNccYU7Chz344 mdq9tXsFG8ulybh5lBo3DcAOoSuxhxxdIDBJXapLU+gWunD4+LQivrGBOGnTtYn+ vXDpV1Y9uj+eszyGouh7ib1hYoS3Jnkkauv6w3HbSgvEKBKGAtI= =a4dq -----END PGP SIGNATURE----- --------------------------------------------------------------------- To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
