There is indeed a <transport-guarantee>CONFIDENTIAL that is active at
line 319. This is the cause of the redirect.
https://github.com/apache/jspwiki/blob/8940830a2df7952957ca2bf0527f424e49f4961d/jspwiki-war/src/main/webapp/WEB-INF/web.xml#L319

Imho the transport-guarantee tags should be removed or commented away.
They are a trap for the beginner, and the advanced use an nginx or
httpd in front.

Am So., 22. März 2026 um 18:15 Uhr schrieb Alex O'Ree <[email protected]>:
>
> I just searched the code base and the only place 8443 is referenced is in
> the tomcat server.xml.
> It might be possible that this is a browser caching issue. There were some
> changes related to cookie storage that may or may not have affected you.
> Could you try a private/incognito browsing session?
>
> On Sun, Mar 22, 2026 at 12:28 PM Jürgen Weber <[email protected]> wrote:
>
> > WEB-INF/web.xml
> >  <transport-guarantee>CONFIDENTIAL
> >
> > is commented out by default, so where does the forward to 8443 come from?
> >
> > Happens on Wildfly 39, too. One has to manually change https/8443 to
> > http/8080 in the browser address line.
> >
> > Am So., 22. März 2026 um 15:29 Uhr schrieb Alex O'Ree <[email protected]
> > >:
> > >
> > > This was done primarily as a "secure as the default" type of setup.
> > > Root cause is the security attributes in web.xml + tomcat's server.xml
> > > configuration.
> > > I've never actually used the command line run setup. Probably would have
> > > saved me a lot of time :)
> > >
> > > On Sun, Mar 22, 2026 at 7:57 AM Juan Pablo Santos Rodríguez <
> > > [email protected]> wrote:
> > >
> > > > Hi,
> > > >
> > > > unless I'm doing something wrong, it would be a -1 for me.
> > > >
> > > > Overall code looks good, build fine and everything seems in place.
> > > > However, after compiling everything, running mvn
> > > > org.codehaus.cargo:cargo-maven3-plugin:run on the war module and
> > > > waiting tomcat to start, going to http://localhost:8080/JSPWiki
> > > > automatically redirects to https://localhost:8443/JSPWiki. If this
> > > > only happens using the maven plugin, I'd be ok to +1 and fix this
> > > > later, but downloading a vanilla tomcat and placing the war on it
> > > > yields the same results.
> > > >
> > > > Also, as a minor nitpick, the provided tag URL is wrong, the tag
> > > > appears to be
> > > > https://github.com/apache/jspwiki/tree/jspwiki-builder-3.0.0-RC1
> > > > (probably it's the name of the tag offered by default by the release
> > > > plugin). This is easily fixable as this tag can be retagged to
> > > > 3.0.0-RC1, though.
> > > >
> > > >
> > > > cheers,
> > > > juan pablo
> > > >
> > > > On Sat, Mar 21, 2026 at 6:34 PM Alex O'Ree <[email protected]>
> > wrote:
> > > > >
> > > > > This is a release vote for Apache JSPWiki, version 3.0.0. The vote
> > will
> > > > be
> > > > > open for at least 72 hours from now.
> > > > >
> > > > > It fixes the following issues:
> > > > >
> > > >
> > https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12310732&version=3.0.0
> > > > >
> > > > > You can see a curated changelog at
> > > > > https://jspwiki-wiki.apache.org/Wiki.jsp?page=NewIn3.0.0
> > > > > Although according to the release procedure, this is updated after
> > the
> > > > > release is voted on and approved.
> > > > >
> > > > > Note that we are voting upon the source (tag), binaries are provided
> > for
> > > > > convenience.
> > > > >
> > > > > Everybody is encouraged to vote.
> > > > >
> > > > > Source and binary files:
> > > > > https://dist.apache.org/repos/dist/dev/jspwiki/3.0.0-RC1
> > > > >
> > > > > Nexus staging repo:
> > > > >
> > https://repository.apache.org/content/repositories/orgapachejspwiki-1035
> > > > >
> > > > > The tag to be voted upon:
> > > > > https://github.com/apache/jspwiki/tree/3.0.0-RC1
> > > > >
> > > > > JSPWiki's KEYS file containing PGP keys we use to sign the release:
> > > > > https://www.apache.org/dist/jspwiki/KEYS
> > > > >
> > > > > == Reproducible Builds ==
> > > > > JSPWiki should follow Reproducible Builds (
> > > > https://reproducible-builds.org/).
> > > > > In order to verify
> > > > > artifacts' build reproducibility, please use
> > > > >
> > > > > mvn verify artifact:compare -Dreference.repo=
> > > > > https://repository.apache.org/content/repositories/staging/
> > > > >
> > > > > *** Please download, test and vote:
> > > > >
> > > > > [ ] +1 Approve the release
> > > > > [ ]  0 Don't mind
> > > > > [ ] -1 Disapprove the release (please provide specific comments)
> > > >
> >

Reply via email to