You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@tomcat.apache.org by Raghu Karamel <rk...@hotmail.com> on 2003/11/12 02:48:42 UTC
Redirecting HTTP requests to HTTPS
Experts,
Need your help!!
I have both the HTTP (port 8080) and HTTPS (Port 8443) working with my Tomcat server (Version 3.2.. I believe).
So is there any way I can get all the HTTP requests redirected to HTTPS by Tomcat? Something by tweaking the Tomcat configuration files?
I do not have an Apache server there to serve Tomcat, otherwise I would have used the mod_rewrite to get that done.
Thanks and your help will be appreciated.
Raghu
Re: Redirecting HTTP requests to HTTPS
Posted by Bill Barker <wb...@wilshire.com>.
"Steph Richardson" <st...@kvasar.com> wrote in message
news:CCEJLCOJKFBHFPKFNNABIEJKDFAA.steph@kvasar.com...
> Adding the following lines to your deployment descriptor ( web.xml ) will
do the trick :
>
It would, if TC 3.x supported redirection :). There isn't anyway to do
this easily in TC 3.
>
> <security-constraint>
> <web-resource-collection>
> <web-resource-name>Entire Application</web-resource-name>
> <url-pattern>/*</url-pattern>
> </web-resource-collection>
> <user-data-constraint>
> <transport-guarantee>CONFIDENTIAL</transport-guarantee>
> </user-data-constraint>
> </security-constraint>
>
>
>
> However - Does anyone know how to configure this in server.xml rather than
web.xml. I would really be able to configure it on a
> server by server basis ( e.g. development vs. production machines ). ?
>
>
> Steph
>
>
>
>
>
>
> > -----Original Message-----
> > From: Raghu Karamel [mailto:rkaramel007@hotmail.com]
> > Sent: Tuesday, November 11, 2003 8:49 PM
> > To: tomcat-user@jakarta.apache.org
> > Subject: Redirecting HTTP requests to HTTPS
> >
> >
> > Experts,
> >
> > Need your help!!
> >
> > I have both the HTTP (port 8080) and HTTPS (Port 8443) working with my
Tomcat server (Version 3.2.. I believe).
> >
> > So is there any way I can get all the HTTP requests redirected to HTTPS
by Tomcat? Something by tweaking the Tomcat
> > configuration files?
> >
> > I do not have an Apache server there to serve Tomcat, otherwise I would
have used the mod_rewrite to get that done.
> >
> > Thanks and your help will be appreciated.
> >
> > Raghu
> >
---------------------------------------------------------------------
To unsubscribe, e-mail: tomcat-user-unsubscribe@jakarta.apache.org
For additional commands, e-mail: tomcat-user-help@jakarta.apache.org
Re: Redirecting HTTP requests to HTTPS
Posted by Bill Barker <wb...@wilshire.com>.
Like I said, TC 3.x doesn't support auto-redirect.
"Raghu Karamel" <rk...@hotmail.com> wrote in message
news:Law9-OE47YzDabigPas00000263@hotmail.com...
> I did that... now I'm getting a message "<h1>SSL required to access this
> page</H1>" when I try to use HTTP. I thought it will automatically get
> redirected HTTPS. Am I missing anything? or is that how it supposed to
work?
>
> Thanks,
> Raghu
>
> ----- Original Message -----
> From: "Steph Richardson" <st...@kvasar.com>
> To: "Tomcat Users List" <to...@jakarta.apache.org>
> Sent: Tuesday, November 11, 2003 5:56 PM
> Subject: RE: Redirecting HTTP requests to HTTPS
>
>
> > Adding the following lines to your deployment descriptor ( web.xml )
will
> do the trick :
> >
> >
> > <security-constraint>
> > <web-resource-collection>
> > <web-resource-name>Entire Application</web-resource-name>
> > <url-pattern>/*</url-pattern>
> > </web-resource-collection>
> > <user-data-constraint>
> > <transport-guarantee>CONFIDENTIAL</transport-guarantee>
> > </user-data-constraint>
> > </security-constraint>
> >
> >
> >
> > However - Does anyone know how to configure this in server.xml rather
than
> web.xml. I would really be able to configure it on a
> > server by server basis ( e.g. development vs. production machines ). ?
> >
> >
> > Steph
> >
> >
> >
> >
> >
> >
> > > -----Original Message-----
> > > From: Raghu Karamel [mailto:rkaramel007@hotmail.com]
> > > Sent: Tuesday, November 11, 2003 8:49 PM
> > > To: tomcat-user@jakarta.apache.org
> > > Subject: Redirecting HTTP requests to HTTPS
> > >
> > >
> > > Experts,
> > >
> > > Need your help!!
> > >
> > > I have both the HTTP (port 8080) and HTTPS (Port 8443) working with my
> Tomcat server (Version 3.2.. I believe).
> > >
> > > So is there any way I can get all the HTTP requests redirected to
HTTPS
> by Tomcat? Something by tweaking the Tomcat
> > > configuration files?
> > >
> > > I do not have an Apache server there to serve Tomcat, otherwise I
would
> have used the mod_rewrite to get that done.
> > >
> > > Thanks and your help will be appreciated.
> > >
> > > Raghu
> > >
> >
> >
> > ---------------------------------------------------------------------
> > To unsubscribe, e-mail: tomcat-user-unsubscribe@jakarta.apache.org
> > For additional commands, e-mail: tomcat-user-help@jakarta.apache.org
> >
> >
---------------------------------------------------------------------
To unsubscribe, e-mail: tomcat-user-unsubscribe@jakarta.apache.org
For additional commands, e-mail: tomcat-user-help@jakarta.apache.org
Re: Redirecting HTTP requests to HTTPS
Posted by Raghu Karamel <rk...@hotmail.com>.
I did that... now I'm getting a message "<h1>SSL required to access this
page</H1>" when I try to use HTTP. I thought it will automatically get
redirected HTTPS. Am I missing anything? or is that how it supposed to work?
Thanks,
Raghu
----- Original Message -----
From: "Steph Richardson" <st...@kvasar.com>
To: "Tomcat Users List" <to...@jakarta.apache.org>
Sent: Tuesday, November 11, 2003 5:56 PM
Subject: RE: Redirecting HTTP requests to HTTPS
> Adding the following lines to your deployment descriptor ( web.xml ) will
do the trick :
>
>
> <security-constraint>
> <web-resource-collection>
> <web-resource-name>Entire Application</web-resource-name>
> <url-pattern>/*</url-pattern>
> </web-resource-collection>
> <user-data-constraint>
> <transport-guarantee>CONFIDENTIAL</transport-guarantee>
> </user-data-constraint>
> </security-constraint>
>
>
>
> However - Does anyone know how to configure this in server.xml rather than
web.xml. I would really be able to configure it on a
> server by server basis ( e.g. development vs. production machines ). ?
>
>
> Steph
>
>
>
>
>
>
> > -----Original Message-----
> > From: Raghu Karamel [mailto:rkaramel007@hotmail.com]
> > Sent: Tuesday, November 11, 2003 8:49 PM
> > To: tomcat-user@jakarta.apache.org
> > Subject: Redirecting HTTP requests to HTTPS
> >
> >
> > Experts,
> >
> > Need your help!!
> >
> > I have both the HTTP (port 8080) and HTTPS (Port 8443) working with my
Tomcat server (Version 3.2.. I believe).
> >
> > So is there any way I can get all the HTTP requests redirected to HTTPS
by Tomcat? Something by tweaking the Tomcat
> > configuration files?
> >
> > I do not have an Apache server there to serve Tomcat, otherwise I would
have used the mod_rewrite to get that done.
> >
> > Thanks and your help will be appreciated.
> >
> > Raghu
> >
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: tomcat-user-unsubscribe@jakarta.apache.org
> For additional commands, e-mail: tomcat-user-help@jakarta.apache.org
>
>
---------------------------------------------------------------------
To unsubscribe, e-mail: tomcat-user-unsubscribe@jakarta.apache.org
For additional commands, e-mail: tomcat-user-help@jakarta.apache.org
Re: Debugging JSSE
Posted by Bill Barker <wb...@wilshire.com>.
To debug Tomcat, change the logging-level for 'org.apache.tomcat.util.net'
to DEBUG.
To debug JSSE, include the option '-Djavax.net.debug=ssl' on the command
line.
"Michael Jeffrey Tucker" <mt...@eecs.harvard.edu> wrote in message
news:20031111211125.Q74171@bowser.eecs.harvard.edu...
> Hi,
>
> I am still trying to figure out what is going wrong with my client-side
> authentication. I've started using the OpenSSL command line tool to debug,
> rather than a web browser. From the command line I am running:
>
> OpenSSL> s_client -connect localbox:8443 -cert client.pem -CAfile ca.pem
> -state
>
> Which open an SSL connection to my Tomcat connector port, with the
> provided clientside cert and the cert for my CA. I am getting the
> following output:
>
> Loading 'screen' into random state - done
> CONNECTED(000002CC)
> SSL_connect:before/connect initialization
> SSL_connect:SSLv2/v3 write client hello A
> SSL_connect:SSLv3 read server hello A
> depth=1
>
/C=US/ST=Ma/L=Camb/O=MyCompany/OU=MyGroup/CN=ENDECA-CA/emailAddress=mr@e.com
> verify return:1
> depth=0
> /C=US/ST=Ma/O=MyCompany/OU=MyGroup/CN=localbox
> verify return:1
> SSL_connect:SSLv3 read server certificate A
> SSL_connect:SSLv3 read server key exchange A
> SSL_connect:SSLv3 read server certificate request A
> SSL_connect:SSLv3 read server done A
> SSL_connect:SSLv3 write client certificate A
> SSL_connect:SSLv3 write client key exchange A
> SSL_connect:SSLv3 write certificate verify A
> SSL_connect:SSLv3 write change cipher spec A
> SSL_connect:SSLv3 write finished A
> SSL_connect:SSLv3 flush data
> SSL_connect:error in SSLv3 read finished A
> SSL_connect:error in SSLv3 read finished A
> write:errno=10054
>
> But I can't figure out how to find a log of what is happening on the other
> side. I am using Tomcat 4.0.1 on a RedHat 7.3 system, but I don't know
> where to look to find the JSSE output. I have looked at the tomcat log
> files, and the catalina_log shows "The incoming request has been awaited"
> and "The incoming request has been assigned", but there is nothing in my
> access log or anything at all related to SSL or JSSE.
>
> If you have any suggestions on how to debug this problem, please let me
> know.
>
> Thanks,
> Mike
---------------------------------------------------------------------
To unsubscribe, e-mail: tomcat-user-unsubscribe@jakarta.apache.org
For additional commands, e-mail: tomcat-user-help@jakarta.apache.org
Debugging JSSE
Posted by Michael Jeffrey Tucker <mt...@eecs.harvard.edu>.
Hi,
I am still trying to figure out what is going wrong with my client-side
authentication. I've started using the OpenSSL command line tool to debug,
rather than a web browser. From the command line I am running:
OpenSSL> s_client -connect localbox:8443 -cert client.pem -CAfile ca.pem
-state
Which open an SSL connection to my Tomcat connector port, with the
provided clientside cert and the cert for my CA. I am getting the
following output:
Loading 'screen' into random state - done
CONNECTED(000002CC)
SSL_connect:before/connect initialization
SSL_connect:SSLv2/v3 write client hello A
SSL_connect:SSLv3 read server hello A
depth=1
/C=US/ST=Ma/L=Camb/O=MyCompany/OU=MyGroup/CN=ENDECA-CA/emailAddress=mr@e.com
verify return:1
depth=0
/C=US/ST=Ma/O=MyCompany/OU=MyGroup/CN=localbox
verify return:1
SSL_connect:SSLv3 read server certificate A
SSL_connect:SSLv3 read server key exchange A
SSL_connect:SSLv3 read server certificate request A
SSL_connect:SSLv3 read server done A
SSL_connect:SSLv3 write client certificate A
SSL_connect:SSLv3 write client key exchange A
SSL_connect:SSLv3 write certificate verify A
SSL_connect:SSLv3 write change cipher spec A
SSL_connect:SSLv3 write finished A
SSL_connect:SSLv3 flush data
SSL_connect:error in SSLv3 read finished A
SSL_connect:error in SSLv3 read finished A
write:errno=10054
But I can't figure out how to find a log of what is happening on the other
side. I am using Tomcat 4.0.1 on a RedHat 7.3 system, but I don't know
where to look to find the JSSE output. I have looked at the tomcat log
files, and the catalina_log shows "The incoming request has been awaited"
and "The incoming request has been assigned", but there is nothing in my
access log or anything at all related to SSL or JSSE.
If you have any suggestions on how to debug this problem, please let me
know.
Thanks,
Mike
---------------------------------------------------------------------
To unsubscribe, e-mail: tomcat-user-unsubscribe@jakarta.apache.org
For additional commands, e-mail: tomcat-user-help@jakarta.apache.org
RE: Redirecting HTTP requests to HTTPS
Posted by Steph Richardson <st...@kvasar.com>.
Adding the following lines to your deployment descriptor ( web.xml ) will do the trick :
<security-constraint>
<web-resource-collection>
<web-resource-name>Entire Application</web-resource-name>
<url-pattern>/*</url-pattern>
</web-resource-collection>
<user-data-constraint>
<transport-guarantee>CONFIDENTIAL</transport-guarantee>
</user-data-constraint>
</security-constraint>
However - Does anyone know how to configure this in server.xml rather than web.xml. I would really be able to configure it on a
server by server basis ( e.g. development vs. production machines ). ?
Steph
> -----Original Message-----
> From: Raghu Karamel [mailto:rkaramel007@hotmail.com]
> Sent: Tuesday, November 11, 2003 8:49 PM
> To: tomcat-user@jakarta.apache.org
> Subject: Redirecting HTTP requests to HTTPS
>
>
> Experts,
>
> Need your help!!
>
> I have both the HTTP (port 8080) and HTTPS (Port 8443) working with my Tomcat server (Version 3.2.. I believe).
>
> So is there any way I can get all the HTTP requests redirected to HTTPS by Tomcat? Something by tweaking the Tomcat
> configuration files?
>
> I do not have an Apache server there to serve Tomcat, otherwise I would have used the mod_rewrite to get that done.
>
> Thanks and your help will be appreciated.
>
> Raghu
>
---------------------------------------------------------------------
To unsubscribe, e-mail: tomcat-user-unsubscribe@jakarta.apache.org
For additional commands, e-mail: tomcat-user-help@jakarta.apache.org