[ale] https being redirected to http

Sun Jul 31 15:24:24 EDT 2005

As I read this, visiting:

     https://ipaddress/

(assuming this resolves to the index.html listed below) should cause 
your browser to refresh to:

     https://ipaddress/AlarmCenter/

which should resolve to:

     https://ipaddress/AlarmCenter/index.jsp

(because of the DirectoryIndex directive). My guess is that whatever is 
pushing the request from this page to the "login.htm" page is also 
pushing you from https to http. Depending on the mechanism that 
triggers the login request, I'd look at:

     /opt/SAM/jakarta-tomcat-4.1.30/webapps/AlarmCenter/index.jsp

or the configuration files:

     /opt/SAM/jakarta-tomcat-4.1.30/webapps/AlarmCenter/.htaccess
     /opt/SAM/jakarta-tomcat-4.1.30/webapps/.htaccess
     /etc/httpd/conf/httpd.conf   (or wherever this lives)

Good luck,
S

On Jul 29, 2005, at 4:50 PM, Christopher Fowler wrote:
> I've got the following setup:
>
> Stunnel --> Apache --> Tomcat
>
> I'm doing this to hack in https support temporarily between the web
> browser and the web server.  The problem is that when tomcat does the
> redirects to send the client to the correct pages it replaces 'https'
> with 'http'
>
> Here is my Apache index.html
> --------------------------
>  <HTML>
> <HEAD>
> <META HTTP-EQUIV="refresh" content="0;URL=/AlarmCenter/">
> <TITLE></TITLE>
> </HEAD>
> <BODY>
> </BODY>
> </HTML>
> -------------------------
>
> No where does it say http. But If I go to site "https://ipaddress/'  My
> browser will be redirected to 'http://ipaddress/AlarmCenter/login.htm'
> Why is tomcat or apache ignoring the fact that I originally came in via
> https?  Could it be a setting in mod_jk.conf?
>
> --------------------------
> <IfModule !mod_jk.c>
>   LoadModule jk_module /usr/local/apache/modules/mod_jk.so
> </IfModule>
>
> JkWorkersFile "/usr/local/tomcat/conf/jk/workers.properties"
> JkLogFile "/usr/local/tomcat/logs/mod_jk.log"
>
> JkLogLevel emerg
>
> # Static files
> Alias /AlarmCenter "/opt/SAM/jakarta-tomcat-4.1.30/webapps/AlarmCenter"
>
> <Directory "/opt/SAM/jakarta-tomcat-4.1.30/webapps/AlarmCenter">
> Options Indexes FollowSymLinks
> DirectoryIndex index.jsp
> </Directory>
>
>
> # Deny direct access to WEB-INF and META-INF
> #
> <Location "/AlarmCenter/WEB-INF/*">
> AllowOverride None
> deny from all
> </Location>
>
> <Location "/AlarmCenter/META-INF/*">
> AllowOverride None
> deny from all
> </Location>
>
> JkMount /AlarmCenter/*.html  ajp13
> JkMount /AlarmCenter/*.jsp  ajp13
> ------------------------------------
>
>
> Thanks,
> Chris
>
>
>
> _______________________________________________
> Ale mailing list
> Ale at ale.org
> http://www.ale.org/mailman/listinfo/ale
>
>
-- 
Stephen Cristol
cristol at emory.edu