Re: Tomcat/manager/ disable redirect from HTTPS to HTTP

2018-10-18 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Hans, On 10/15/18 03:17, Hans Schou wrote: > On Fri, 12 Oct 2018 at 14:12, Mark Thomas > wrote: > >> >> For the HTTP connector processing proxied traffic originally >> received over HTTPS you want: SSLEnabled="false" scheme="https" >> secure="tr

Re: Tomcat/manager/ disable redirect from HTTPS to HTTP

2018-10-15 Thread Hans Schou
On Fri, 12 Oct 2018 at 14:12, Mark Thomas wrote: > > For the HTTP connector processing proxied traffic originally received > over HTTPS you want: > SSLEnabled="false" > scheme="https" > secure="true" > Thanks, this one is working exactly as expected: A bonus is that I now got forced use of

Re: Tomcat/manager/ disable redirect from HTTPS to HTTP

2018-10-12 Thread Mark Thomas
On 12/10/18 12:18, Hans Schou wrote: > Hi > > I have a Tomcat 8.5 with Java 1.8 on Windows with Nginx reverse proxy. > > When I access https://joe:p4zzw...@example.org/manager/ the request goes to > Nginx, which proxy_pass it to http://srv321.local:8080/ > > Authentication appears right away but

Tomcat/manager/ disable redirect from HTTPS to HTTP

2018-10-12 Thread Hans Schou
Hi I have a Tomcat 8.5 with Java 1.8 on Windows with Nginx reverse proxy. When I access https://joe:p4zzw...@example.org/manager/ the request goes to Nginx, which proxy_pass it to http://srv321.local:8080/ Authentication appears right away but the first response from Tomcat is Location: http:/

Re: How to redirect from HTTPS to HTTP

2009-08-30 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Thilani, On 8/29/2009 9:23 AM, Thilani wrote: > I am developing a web application which is require login for users. I want > to use HTTPS for login only. Your biggest problem will be maintaining the session id across the HTTP->HTTPS switch. See this

Re: How to redirect from HTTPS to HTTP

2009-08-29 Thread Mark Thomas
Thilani wrote: > After successfully login I want to direct users to http connection That is a really bad idea. If the threats to your system are such that you need to protect the login process using SSL then you should be providing the same level of protection for your session ID and running every

Re: How to redirect from HTTPS to HTTP

2009-08-29 Thread Hassan Schroeder
On Sat, Aug 29, 2009 at 10:53 AM, Thilani wrote: > I tried but no success. > Can you please give me a simple example? So I can try it out. What have you tried? Are you using the URLRewriteFilter or writing one of your own? -- Hassan Schroeder hassan.schroe...@gmail.com

Re: How to redirect from HTTPS to HTTP

2009-08-29 Thread Thilani
igure a > Filter which modifies the URL and executes a redirect. I'm assuming you > know a) what a servlet Filter is, and b) how to perform a redirect. > > > p > > > >> Please explain. >> >> Regards. >> > > > --

Re: How to redirect from HTTPS to HTTP

2009-08-29 Thread Pid
On 29/08/2009 14:23, Thilani wrote: Hi All, I am developing a web application which is require login for users. I want to use HTTPS for login only. Application server is tomcat 6.x and following is the url for login. https://localhost:8443/GIShome/index.shtm After successfully login I want to

Re: How to redirect from HTTPS to HTTP

2009-08-29 Thread Hassan Schroeder
On Sat, Aug 29, 2009 at 8:31 AM, Thilani wrote: > Can you please explain how can I use this with my application? > With this should I use security-constraint as well? Of course: the security-constraint indicates the resource to protect; if a client makes a request for a non-protected resource via

RE: How to redirect from HTTPS to HTTP

2009-08-29 Thread Martin Gainty
manipulation, nous ne pouvons accepter aucune responsabilité pour le contenu fourni. > Date: Sat, 29 Aug 2009 16:26:16 +0200 > From: alexander.mestiashv...@biotec.tu-dresden.de > To: users@tomcat.apache.org > Subject: Re: How to redirect from HTTPS to HTTP > > Thilani

Re: How to redirect from HTTPS to HTTP

2009-08-29 Thread Thilani
n. So how can I redirect >> this >> to http from https again? >> Please explain. >> >> Regards. >> >> > Hi , > with apache rewrite it is not a problem , > here is rewrite filter for

Re: How to redirect from HTTPS to HTTP

2009-08-29 Thread Alexander Mestiashvili
Thilani wrote: Hi All, I am developing a web application which is require login for users. I want to use HTTPS for login only. Application server is tomcat 6.x and following is the url for login. https://localhost:8443/GIShome/index.shtm After successfully login I want to direct users to http

How to redirect from HTTPS to HTTP

2009-08-29 Thread Thilani
again. So how can I redirect this to http from https again? Please explain. Regards. -- View this message in context: http://www.nabble.com/How-to-redirect-from-HTTPS-to-HTTP-tp25202884p25202884.html Sent from the Tomcat - User mailing list archive at Nabble.com

Re: Redirect from https to http

2009-04-08 Thread Mark Thomas
as2 wrote: > lol, any easy way of doing it? e.g. by the reverse of http->https response.sendRedirect() Mark - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apach

Re: Redirect from https to http

2009-04-08 Thread as2
lol, any easy way of doing it? e.g. by the reverse of http->https Thanks -- View this message in context: http://www.nabble.com/Redirect-from-https-to-http-tp22938216p22946827.html Sent from the Tomcat - User mailing list archive at Nabble.

Re: Redirect from https to http

2009-04-07 Thread Mark Thomas
as2 wrote: > Is this possible? Yes. - To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org

Redirect from https to http

2009-04-07 Thread as2
Is this possible? Thanks x -- View this message in context: http://www.nabble.com/Redirect-from-https-to-http-tp22938216p22938216.html Sent from the Tomcat - User mailing list archive at Nabble.com. - To unsubscribe, e-mail

Re: Unexpected redirect from https to http

2009-01-27 Thread Timothy Tagge
Eureka! The addition of scheme="https" got me halfway there, with https being correctly requested instead of http. However it then was adding port 80 to the end of the domain. But the addition of proxyPort="443" solved that issue as well. Thanks all. On Tue, Jan 27, 2009 at 12:07 PM, Konstanti

Re: Unexpected redirect from https to http

2009-01-27 Thread Konstantin Kolinko
2009/1/27 Timothy Tagge : > I'm working on an application that does redirects to itself. The > application is intended to run under https for all pages. However, > when the redirect is requested, the resulting URL shown in the browser > is http://secureServer/correctDomain/correctPage.jsp This

Re: Unexpected redirect from https to http

2009-01-27 Thread Timothy Tagge
#x27;t work because there is no http listener. Is this what you want? > > I have no idea, except that perhaps Tomcat changes the scheme to https > automatically whenever it can. > > > --- On Mon, 1/26/09, Timothy Tagge wrote: > >> From: Timothy Tagge >> Subject: Unexpec

Re: Unexpected redirect from https to http

2009-01-27 Thread removeps-groups
Tagge wrote: > From: Timothy Tagge > Subject: Unexpected redirect from https to http > To: users@tomcat.apache.org > Date: Monday, January 26, 2009, 3:01 PM > I'm working on an application that does redirects to > itself. The > application is intended to run under https fo

Unexpected redirect from https to http

2009-01-26 Thread Timothy Tagge
I'm working on an application that does redirects to itself. The application is intended to run under https for all pages. However, when the redirect is requested, the resulting URL shown in the browser is http://secureServer/correctDomain/correctPage.jsp This request times out because there is