You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@tomcat.apache.org by bu...@apache.org on 2003/04/18 13:09:13 UTC

DO NOT REPLY [Bug 19145] New: - http to https redirect fails on non-standard ports

DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG 
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
<http://nagoya.apache.org/bugzilla/show_bug.cgi?id=19145>.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND 
INSERTED IN THE BUG DATABASE.

http://nagoya.apache.org/bugzilla/show_bug.cgi?id=19145

http to https redirect fails on non-standard ports

           Summary: http to https redirect fails on non-standard ports
           Product: Tomcat 4
           Version: 4.1.24
          Platform: PC
        OS/Version: Windows XP
            Status: NEW
          Severity: Major
          Priority: Other
         Component: Connector:Coyote HTTP/1.1
        AssignedTo: tomcat-dev@jakarta.apache.org
        ReportedBy: kisst2@freemail.hu


I have the following snippet is defined in the server.xml file:

<Connector className="org.apache.coyote.tomcat4.CoyoteConnector"
    port="8080" minProcessors="5" maxProcessors="75"
    enableLookups="true" redirectPort="8443"
    acceptCount="100" debug="10" connectionTimeout="20000"
    useURIValidationHack="false" disableUploadTimeout="true" />

<Connector className="org.apache.coyote.tomcat4.CoyoteConnector"
    port="8443" minProcessors="5" maxProcessors="75"
    enableLookups="true"
    acceptCount="100" debug="10" scheme="https" secure="true"
    useURIValidationHack="false" disableUploadTimeout="true">
    <Factory className="org.apache.coyote.tomcat4.CoyoteServerSocketFactory"
             clientAuth="false" protocol="TLS" />
</Connector> 

and the following part is defined in my web.xml

<welcome-file-list>
    <welcome-file>main/index.jsp</welcome-file>
</welcome-file-list>

<security-constraint>
	<web-resource-collection>
		<web-resource-name>loginRequired</web-resource-name>
		<url-pattern>/main/*</url-pattern>
	</web-resource-collection>
	<auth-constraint>
		<role-name>admin</role-name>
	</auth-constraint>
</security-constraint>

<security-constraint>
	<web-resource-collection>
		<web-resource-name>SSL login</web-resource-name>
		<url-pattern>/login.jsp</url-pattern>
	</web-resource-collection>
	<user-data-constraint>
		<description>Secured</description>
		<transport-guarantee>CONFIDENTIAL</transport-guarantee>
	</user-data-constraint>
</security-constraint>

<login-config>
	<auth-method>FORM</auth-method>
	<form-login-config>
		<form-login-page>/login.jsp</form-login-page>
		<form-error-page>/error.jsp</form-error-page>
	</form-login-config>
</login-config>

if I direct my browser to

http://127.0.0.1:8080/mywebapp

tomcat correctly switches to https, the URL in my browser changes to

https://127.0.0.1:8443/mywebapp/login.jsp

and the page starts loading, but never finishes. If I press the stop button 
and view the source of the page loaded, it is all there. If I press refresh 
the page gets loaded without any problems. (I have tried his with IE and 
Netscape as well.)

If I configure http port as 80 and https as 443, the problem does not occur.

---------------------------------------------------------------------
To unsubscribe, e-mail: tomcat-dev-unsubscribe@jakarta.apache.org
For additional commands, e-mail: tomcat-dev-help@jakarta.apache.org