You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@tomcat.apache.org by bu...@apache.org on 2004/01/29 19:39:50 UTC
DO NOT REPLY [Bug 26529] New: -
ISAPI redirector with SSL and tomcat 4.29
DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
<http://nagoya.apache.org/bugzilla/show_bug.cgi?id=26529>.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND
INSERTED IN THE BUG DATABASE.
http://nagoya.apache.org/bugzilla/show_bug.cgi?id=26529
ISAPI redirector with SSL and tomcat 4.29
Summary: ISAPI redirector with SSL and tomcat 4.29
Product: Tomcat 4
Version: 4.1.29
Platform: Other
OS/Version: Windows NT/2K
Status: NEW
Severity: Critical
Priority: Other
Component: Connector:Other
AssignedTo: tomcat-dev@jakarta.apache.org
ReportedBy: tmg@cnicorp.com
I'm running Windows 2000 Advance Server with Tomcat 4.29 and IIS 5
I have the ISAPI redirector installed and working with IIS & Tomcat on HTTP
http://localhost/MySite/HomePage.jsp
I installed a server certificate and enables SSL on port 443 in IIS
I'm able to view 'static' objects (like html pages & images) via SSL
https://localhost/MySite/index.html
While any non SSL URL (still static objects) will not be served by IIS and the
user will see the 'standard' IIS error:
HTTP 403.4 - Forbidden: SSL required
http://localhost/MySite/index.html
The problem is when I try to view any JSP/Servlet the browser wants to 'save'
the page to the local drive.
http://localhost/MySite/HomePage.jsp
In other words the JSP is not served as HTML to the browser and the browser does
not know what to do with the file except save it.
I set the ISAPI error reporting to DEBUG and it looks like it the redirector
just 'stops' and does not forward the request correctly.
*****
So the questions is:
How to I get the ISAPI redirector to work with SSL?
Connecting IIS (on port 80) to Tomcat with SSL enabled on every URL and so
http urls will be redirected to https
*****
There are no erros in my tomcat logs.
Here is my ISAPI log file of trying to serve a JSP page:
[Thu Jan 29 13:18:16 2004] [jk_isapi_plugin.c (1018)]: Using registry.
[Thu Jan 29 13:18:16 2004] [jk_isapi_plugin.c (1020)]: Using log file
C:\\Program Files\\Apache Group\\Tomcat 4.1\\iis\\iis_redirect.txt.
[Thu Jan 29 13:18:16 2004] [jk_isapi_plugin.c (1021)]: Using log level 0.
[Thu Jan 29 13:18:16 2004] [jk_isapi_plugin.c (1022)]: Using extension uri
/jakarta/isapi_redirector.dll.
[Thu Jan 29 13:18:16 2004] [jk_isapi_plugin.c (1023)]: Using worker file
C:\\Program Files\\Apache Group\\Tomcat 4.1\\conf\\workers.properties.
[Thu Jan 29 13:18:16 2004] [jk_isapi_plugin.c (1024)]: Using worker mount file
C:\\Program Files\\Apache Group\\Tomcat 4.1\\conf\\uriworkermap.properties.
[Thu Jan 29 13:18:16 2004] [jk_isapi_plugin.c (1025)]: Using uri select 0.
[Thu Jan 29 13:18:16 2004] [jk_isapi_plugin.c (1041)]: Ignoring worker mount
file entry default.worker=ajp13.
[Thu Jan 29 13:18:16 2004] [jk_isapi_plugin.c (1041)]: Ignoring worker mount
file entry j_security_check=ajp13.
[Thu Jan 29 13:18:16 2004] [jk_uri_worker_map.c (172)]: Into
jk_uri_worker_map_t::uri_worker_map_alloc
[Thu Jan 29 13:18:16 2004] [jk_uri_worker_map.c (375)]: Into
jk_uri_worker_map_t::uri_worker_map_open
[Thu Jan 29 13:18:16 2004] [jk_uri_worker_map.c (396)]:
jk_uri_worker_map_t::uri_worker_map_open, rule map size is 5
[Thu Jan 29 13:18:16 2004] [jk_uri_worker_map.c (299)]: Into
jk_uri_worker_map_t::uri_worker_map_open, suffix rule /.jsp=ajp13 was added
[Thu Jan 29 13:18:16 2004] [jk_uri_worker_map.c (321)]: Into
jk_uri_worker_map_t::uri_worker_map_open, match rule /MySite/Servlets/=ajp13 was
added
[Thu Jan 29 13:18:16 2004] [jk_uri_worker_map.c (299)]: Into
jk_uri_worker_map_t::uri_worker_map_open, suffix rule /MySite/.jsp=ajp13 was added
[Thu Jan 29 13:18:16 2004] [jk_uri_worker_map.c (299)]: Into
jk_uri_worker_map_t::uri_worker_map_open, suffix rule /MySite/.do=ajp13 was added
[Thu Jan 29 13:18:16 2004] [jk_uri_worker_map.c (345)]: Into
jk_uri_worker_map_t::uri_worker_map_open, exact rule
/MySite/AdminFunctions/j_security_check=ajp13 was added
[Thu Jan 29 13:18:16 2004] [jk_uri_worker_map.c (408)]: Into
jk_uri_worker_map_t::uri_worker_map_open, there are 5 rules
[Thu Jan 29 13:18:16 2004] [jk_uri_worker_map.c (422)]:
jk_uri_worker_map_t::uri_worker_map_open, done
[Thu Jan 29 13:18:16 2004] [jk_worker.c (88)]: Into wc_open
[Thu Jan 29 13:18:16 2004] [jk_worker.c (224)]: Into build_worker_map, creating
1 workers
[Thu Jan 29 13:18:16 2004] [jk_worker.c (230)]: build_worker_map, creating
worker ajp13
[Thu Jan 29 13:18:16 2004] [jk_worker.c (148)]: Into wc_create_worker
[Thu Jan 29 13:18:16 2004] [jk_worker.c (260)]: Factory :ajp12
[Thu Jan 29 13:18:16 2004] [jk_worker.c (260)]: Factory :ajp13
[Thu Jan 29 13:18:16 2004] [jk_worker.c (164)]: wc_create_worker, about to
create instance ajp13 of ajp13
[Thu Jan 29 13:18:16 2004] [jk_ajp13_worker.c (108)]: Into ajp13_worker_factory
[Thu Jan 29 13:18:16 2004] [jk_worker.c (173)]: wc_create_worker, about to
validate and init ajp13
[Thu Jan 29 13:18:16 2004] [jk_ajp_common.c (1206)]: Into jk_worker_t::validate
[Thu Jan 29 13:18:16 2004] [jk_ajp_common.c (1226)]: In jk_worker_t::validate
for worker ajp13 contact is localhost:8009
[Thu Jan 29 13:18:16 2004] [jk_ajp_common.c (1254)]: Into jk_worker_t::init
[Thu Jan 29 13:18:16 2004] [jk_ajp_common.c (1274)]: In jk_worker_t::init,
setting socket timeout to 0
[Thu Jan 29 13:18:16 2004] [jk_worker.c (189)]: wc_create_worker, done
[Thu Jan 29 13:18:16 2004] [jk_worker.c (240)]: build_worker_map, removing old
ajp13 worker
[Thu Jan 29 13:18:16 2004] [jk_worker.c (252)]: build_worker_map, done
[Thu Jan 29 13:18:16 2004] [jk_worker.c (111)]: wc_open, done 1
[Thu Jan 29 13:18:16 2004] [jk_isapi_plugin.c (655)]: Detected IIS >= 5.0
[Thu Jan 29 13:18:16 2004] [jk_isapi_plugin.c (696)]: HttpFilterProc started
[Thu Jan 29 13:18:16 2004] [jk_isapi_plugin.c (759)]: In HttpFilterProc Virtual
Host redirection of /localhost/MySite/Htmlfiles/Home.jsp
[Thu Jan 29 13:18:16 2004] [jk_uri_worker_map.c (460)]: Into
jk_uri_worker_map_t::map_uri_to_worker
[Thu Jan 29 13:18:16 2004] [jk_uri_worker_map.c (477)]: Attempting to map URI
'/localhost/MySite/Htmlfiles/Home.jsp'
[Thu Jan 29 13:18:16 2004] [jk_uri_worker_map.c (558)]:
jk_uri_worker_map_t::map_uri_to_worker, Found a suffix match ajp13 -> *.jsp
[Thu Jan 29 13:18:16 2004] [jk_isapi_plugin.c (775)]: HttpFilterProc
[/MySite/Htmlfiles/Home.jsp] is a servlet url - should redirect to ajp13
[Thu Jan 29 13:18:16 2004] [jk_isapi_plugin.c (838)]: HttpFilterProc check if
[/MySite/Htmlfiles/Home.jsp] is points to the web-inf directory
...nothing follows....
****************
server.xml
<Server port="8005" shutdown="SHUTDOWN" debug="0">
<GlobalNamingResources>
<Resource name="UserDatabase" auth="Container"
type="org.apache.catalina.UserDatabase"
description="User database that can be updated and saved">
</Resource>
<ResourceParams name="UserDatabase">
<parameter>
<name>factory</name>
<value>org.apache.catalina.users.MemoryUserDatabaseFactory</value></parameter>
<parameter>
<name>pathname</name>
<value>conf/tomcat-users.xml</value></parameter>
</ResourceParams>
</GlobalNamingResources>
<!-- Define the Tomcat Stand-Alone Service -->
<Service name="Tomcat-Standalone">
<!-- Define a Coyote HTTP/1.1 Connector on port 8080-->
<Connector className="org.apache.coyote.tomcat4.CoyoteConnector"
port="8080" minProcessors="5" maxProcessors="75"
enableLookups="true" redirectPort="443"
acceptCount="10" debug="9" connectionTimeout="10"
useURIValidationHack="false" />
<!-- Define a Coyote/JK2 AJP 1.3 Connector on port 8009 -->
<Connector className="org.apache.coyote.tomcat4.CoyoteConnector"
port="8009"
minProcessors="5"
maxProcessors="75"
enableLookups="false"
acceptCount="10" debug="0"
connectionTimeout="20000"
useURIValidationHack="false"
redirectPort="443"
protocolHandlerClassName="org.apache.jk.server.JkCoyoteHandler"/>
<!-- Define the top level container in our container hierarchy -->
<Engine name="Standalone" defaultHost="localhost" debug="0">
<!-- Global logger unless overridden at lower levels -->
<Logger className="org.apache.catalina.logger.FileLogger"
prefix="catalina_log" suffix=".txt"
timestamp="true"/>
<Realm className="org.apache.catalina.realm.UserDatabaseRealm" debug="0"
resourceName="UserDatabase"/>
<!-- Define MySite virtual host -->
<Host name="localhost" debug="0" appBase="webapps" unpackWARs="true"
autoDeploy="true">
<Valve className="org.apache.catalina.authenticator.SingleSignOn" debug="0"/>
<Context path="/MySite" docBase="c:\Websites\MySite" debug="0"
reloadable="false" crossContext="false">
<Logger className="org.apache.catalina.logger.FileLogger" prefix="MySite_log"
suffix=".txt" timestamp="true" verbosityLevel="DEBUG"/>
</Context>
</Host>
</Engine>
</Service>
</Server>
**********
uriworkermap.properties
**********
# Default worker to be used through our mappings
default.worker=ajp13
# Root context mounts for Tomcat
/*.jsp=$(default.worker)
j_security_check=$(default.worker)
# The following line mounts all JSP file and the /servlet/ uri to tomcat
/MySite/Servlets/*=$(default.worker)
/MySite/*.jsp=$(default.worker)
/MySite/*.do=$(default.worker)
/MySite/AdminFunctions/j_security_check=$(default.worker)
**********
workers.properties
**********
workers.tomcat_home=C:\Program Files\Apache Group\Tomcat 4.1
workers.java_home=C:\j2sdk1.4.2_03
ps=\
worker.list=ajp13
worker.ajp13.port=8009
worker.ajp13.host=localhost
worker.ajp13.type=ajp13
worker.ajp13.lbfactor=1
********nothing follows***********
---------------------------------------------------------------------
To unsubscribe, e-mail: tomcat-dev-unsubscribe@jakarta.apache.org
For additional commands, e-mail: tomcat-dev-help@jakarta.apache.org