[jira] [Created] (OOZIE-1257) Make Oozie client automatically redirect from http to https when https is enabled

["Robert Kanter (JIRA)" <ji...@apache.org>]

Robert Kanter created OOZIE-1257:
------------------------------------

             Summary: Make Oozie client automatically redirect from http to https when https is enabled
                 Key: OOZIE-1257
                 URL: https://issues.apache.org/jira/browse/OOZIE-1257
             Project: Oozie
          Issue Type: Improvement
          Components: security
    Affects Versions: trunk, 3.3.2
            Reporter: Robert Kanter


OOZIE-1233 adds the ability to more easily and consistently configure Oozie to use HTTPS instead of HTTP.  Browsers will redirect the user from the http url to the https one (e.g. http://localhost:11000/oozie --> https://localhost:11443/oozie), but the oozie client will not.  

According to [this|http://docs.oracle.com/javase/1.5.0/docs/guide/deployment/deployment-guide/upgrade-guide/article-17.html] "because of serious security consequences, redirection between HTTP and HTTPS is not automatically followed \[in Java\]".  However, that same page also gives a workaround; we should see if that actually works because it would be easier for users if the Oozie client redirected.  

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira