Return-Path: X-Original-To: apmail-felix-dev-archive@www.apache.org Delivered-To: apmail-felix-dev-archive@www.apache.org Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by minotaur.apache.org (Postfix) with SMTP id 76E05178E6 for ; Mon, 29 Sep 2014 10:08:24 +0000 (UTC) Received: (qmail 43704 invoked by uid 500); 29 Sep 2014 10:08:24 -0000 Delivered-To: apmail-felix-dev-archive@felix.apache.org Received: (qmail 43626 invoked by uid 500); 29 Sep 2014 10:08:24 -0000 Mailing-List: contact dev-help@felix.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: dev@felix.apache.org Delivered-To: mailing list dev@felix.apache.org Received: (qmail 43615 invoked by uid 99); 29 Sep 2014 10:08:23 -0000 Received: from nike.apache.org (HELO nike.apache.org) (192.87.106.230) by apache.org (qpsmtpd/0.29) with ESMTP; Mon, 29 Sep 2014 10:08:23 +0000 X-ASF-Spam-Status: No, hits=2.2 required=5.0 tests=HTML_MESSAGE,RCVD_IN_DNSWL_NONE,SPF_HELO_PASS,SPF_PASS X-Spam-Check-By: apache.org Received-SPF: pass (nike.apache.org: domain of asanso@adobe.com designates 157.56.111.71 as permitted sender) Received: from [157.56.111.71] (HELO na01-bn1-obe.outbound.protection.outlook.com) (157.56.111.71) by apache.org (qpsmtpd/0.29) with ESMTP; Mon, 29 Sep 2014 10:07:55 +0000 Received: from BY2PR02MB203.namprd02.prod.outlook.com (10.242.232.25) by BY2PR02MB284.namprd02.prod.outlook.com (10.242.236.154) with Microsoft SMTP Server (TLS) id 15.0.1024.12; Mon, 29 Sep 2014 10:07:52 +0000 Received: from BY2PR02MB204.namprd02.prod.outlook.com (10.242.232.26) by BY2PR02MB203.namprd02.prod.outlook.com (10.242.232.25) with Microsoft SMTP Server (TLS) id 15.0.1039.15; Mon, 29 Sep 2014 10:07:50 +0000 Received: from BY2PR02MB204.namprd02.prod.outlook.com ([169.254.15.204]) by BY2PR02MB204.namprd02.prod.outlook.com ([169.254.15.204]) with mapi id 15.00.1039.011; Mon, 29 Sep 2014 10:07:50 +0000 From: Antonio Sanso To: "dev@felix.apache.org" Subject: Re: [FELIX-3693] HTTP SSLFilter Thread-Topic: [FELIX-3693] HTTP SSLFilter Thread-Index: AQHP28ME7bGMytJHvEaRIEkwptGUeZwX3YWAgAAFuIA= Date: Mon, 29 Sep 2014 10:07:50 +0000 Message-ID: References: <034AEAB4-AB61-4974-B871-3A108FDA77C0@adobe.com> <9A66D44C-F3E7-427C-A91B-EB7AB48D79AE@adobe.com> In-Reply-To: <9A66D44C-F3E7-427C-A91B-EB7AB48D79AE@adobe.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [192.147.117.11] x-microsoft-antispam: BCL:0;PCL:0;RULEID:;SRVR:BY2PR02MB203;UriScan:; x-forefront-prvs: 034902F5BC x-forefront-antispam-report: SFV:NSPM;SFS:(10009020)(24454002)(199003)(377454003)(189002)(80022003)(16236675004)(33656002)(77982003)(85852003)(110136001)(2351001)(79102003)(4396001)(74502003)(90102001)(92566001)(81342003)(99396003)(107886001)(120916001)(101416001)(76482002)(46102003)(19617315012)(86362001)(10300001)(74662003)(81542003)(83716003)(92726001)(2656002)(87936001)(82746002)(20776003)(77096002)(106116001)(83322001)(95666004)(19580395003)(105586002)(15975445006)(19580405001)(97736003)(99286002)(85306004)(21056001)(31966008)(50986999)(2501002)(107046002)(76176999)(66066001)(83072002)(36756003)(64706001)(54356999)(106356001)(104396001);DIR:OUT;SFP:1101;SCL:1;SRVR:BY2PR02MB203;H:BY2PR02MB204.namprd02.prod.outlook.com;FPR:;MLV:sfv;PTR:InfoNoRecords;A:1;MX:1;LANG:en; Content-Type: multipart/alternative; boundary="_000_A3FC044CC74547CEBC7AE9E76C765AEDadobecom_" MIME-Version: 1.0 X-Microsoft-Antispam: BCL:0;PCL:0;RULEID:; X-OriginatorOrg: adobe.com X-Virus-Checked: Checked by ClamAV on apache.org --_000_A3FC044CC74547CEBC7AE9E76C765AEDadobecom_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable thanks Felix . So IIUC the logic is based on the presence of the X-Forwarde= d-Port header right :))? regards antonio On Sep 29, 2014, at 11:47 AM, Antonio Sanso > wrote: (sorry I am not subscribed to the list) the configuration options proposed by Jan is a good solution IMHO. regards antonio On Sep 29, 2014, at 10:54 AM, Antonio Sanso > wrote: hi *, looking at [FELIX-3693] HTTP SSLFilter [0] specially at the SslFilterReques= t it looks to me that the final Request object might end up having this wei= rd behavior: - request.getScheme() =3D=3D> https - request.getServerPort() =3D=3D> 80 and possibly - request.getRequestURL() =3D=3D> https://domain.80/active.html IMHO having a scheme https with a port 80 might lead to some inconsistencie= s . WDYT? regards antonio [0] https://issues.apache.org/jira/browse/FELIX-4420 --_000_A3FC044CC74547CEBC7AE9E76C765AEDadobecom_--