You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@tomcat.apache.org by Mark Prins <MA...@zonnet.nl> on 2003/05/09 16:52:14 UTC
TC 4.1.24: http -> https, portnumber added to URL
I have a webmail app (jwma) running behind a proxy/firewall and I want to
use SSL. That works OK. The problem is that the proxy listens on port 443
and tomcat on 8443 and that when I use the following in my web.xml
<user-data-constraint>
<transport-guarantee>CONFIDENTIAL</transport-guarantee>
</user-data-constraint>
it redirects to https (OK), but the URL then also gets the port number TC
is listening on attached:
http:// ..../webmail
becomes
https:// ... :8443/webmail
And then I get a socket error because that port is blocked. It works fine
when I directly use the url https:// .../webmail
The connector looks like this:
<Connector className="org.apache.coyote.tomcat4.CoyoteConnector"
acceptCount="100" address="192.168.127.158" bufferSize="2048"
compression="on" connectionLinger="-1" connectionTimeout="60000"
debug="0" disableUploadTimeout="true" enableLookups="false"
maxKeepAliveRequests="100" maxProcessors="75" minProcessors="10"
port="8443"
protocolHandlerClassName="org.apache.coyote.http11.Http11Protocol"
proxyName="<MY SERVER>" proxyPort="443" redirectPort="443"
scheme="https" secure="true" tcpNoDelay="true"
useURIValidationHack="false">
<Factory
className="org.apache.coyote.tomcat4.CoyoteServerSocketFactory"
clientAuth="false" keystoreFile="conf\.keystore"
keystorePass="<PASSWORD>" keystoreType="JKS" protocol="TLS" />
</Connector>
Any ideas how to prevent the :8443 being attached to the url
Mark
--
_____________________________________________________________________
2x sneller ADSL met Zon Breedband Family. In combinatie met ZonTel
nu voor maar 29 euro per maand. Bestel nu op www.zonnet.nl/breedband
Bovendien met gratis modem en geen aansluitkosten!
---------------------------------------------------------------------
To unsubscribe, e-mail: tomcat-user-unsubscribe@jakarta.apache.org
For additional commands, e-mail: tomcat-user-help@jakarta.apache.org
Re: TC 4.1.24: http -> https, portnumber added to URL
Posted by Mark Prins <MA...@zonnet.nl>.
thanx Bill, that helps.. the HTTT connector was pointing to 8443 but it
should ofcourse redirect to the proxy/firewall.
Mark
Citeren Bill Barker <wb...@wilshire.com>:
> The info below is on the https Connector. The one that is failing is
> the
> http Connector. Make sure that you have configured the 'redirectPort'
> on
> the http Connector to point to 443 (this is not the out-of-the-box
> setup).
>
> "Mark Prins" <MA...@zonnet.nl> wrote in message
> news:1052491934.3ebbc09e2926f@webmail.zonnet.nl...
> > I have a webmail app (jwma) running behind a proxy/firewall and I want
> to
> > use SSL. That works OK. The problem is that the proxy listens on port
> 443
> > and tomcat on 8443 and that when I use the following in my web.xml
> >
> >
> > <user-data-constraint>
> > <transport-guarantee>CONFIDENTIAL</transport-guarantee>
> > </user-data-constraint>
> >
> > it redirects to https (OK), but the URL then also gets the port number
> TC
> > is listening on attached:
> > http:// ..../webmail
> > becomes
> > https:// ... :8443/webmail
> >
> > And then I get a socket error because that port is blocked. It works
> fine
> > when I directly use the url https:// .../webmail
> >
--
_____________________________________________________________________
2x sneller ADSL met Zon Breedband Family. In combinatie met ZonTel
nu voor maar 29 euro per maand. Bestel nu op www.zonnet.nl/breedband
Bovendien met gratis modem en geen aansluitkosten!
---------------------------------------------------------------------
To unsubscribe, e-mail: tomcat-user-unsubscribe@jakarta.apache.org
For additional commands, e-mail: tomcat-user-help@jakarta.apache.org
Re: TC 4.1.24: http -> https, portnumber added to URL
Posted by Bill Barker <wb...@wilshire.com>.
The info below is on the https Connector. The one that is failing is the
http Connector. Make sure that you have configured the 'redirectPort' on
the http Connector to point to 443 (this is not the out-of-the-box setup).
"Mark Prins" <MA...@zonnet.nl> wrote in message
news:1052491934.3ebbc09e2926f@webmail.zonnet.nl...
> I have a webmail app (jwma) running behind a proxy/firewall and I want to
> use SSL. That works OK. The problem is that the proxy listens on port 443
> and tomcat on 8443 and that when I use the following in my web.xml
>
>
> <user-data-constraint>
> <transport-guarantee>CONFIDENTIAL</transport-guarantee>
> </user-data-constraint>
>
> it redirects to https (OK), but the URL then also gets the port number TC
> is listening on attached:
> http:// ..../webmail
> becomes
> https:// ... :8443/webmail
>
> And then I get a socket error because that port is blocked. It works fine
> when I directly use the url https:// .../webmail
>
> The connector looks like this:
> <Connector className="org.apache.coyote.tomcat4.CoyoteConnector"
> acceptCount="100" address="192.168.127.158" bufferSize="2048"
> compression="on" connectionLinger="-1" connectionTimeout="60000"
> debug="0" disableUploadTimeout="true" enableLookups="false"
> maxKeepAliveRequests="100" maxProcessors="75" minProcessors="10"
> port="8443"
> protocolHandlerClassName="org.apache.coyote.http11.Http11Protocol"
> proxyName="<MY SERVER>" proxyPort="443" redirectPort="443"
> scheme="https" secure="true" tcpNoDelay="true"
> useURIValidationHack="false">
>
> <Factory
> className="org.apache.coyote.tomcat4.CoyoteServerSocketFactory"
> clientAuth="false" keystoreFile="conf\.keystore"
> keystorePass="<PASSWORD>" keystoreType="JKS" protocol="TLS" />
> </Connector>
>
> Any ideas how to prevent the :8443 being attached to the url
> Mark
> --
> _____________________________________________________________________
> 2x sneller ADSL met Zon Breedband Family. In combinatie met ZonTel
> nu voor maar 29 euro per maand. Bestel nu op www.zonnet.nl/breedband
> Bovendien met gratis modem en geen aansluitkosten!
---------------------------------------------------------------------
To unsubscribe, e-mail: tomcat-user-unsubscribe@jakarta.apache.org
For additional commands, e-mail: tomcat-user-help@jakarta.apache.org