tomcat-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Ted Spradley <ted.k.sprad...@gmail.com>
Subject Re: Proxy Apache https to Tomcat http
Date Thu, 06 Oct 2016 01:31:32 GMT
Chris,

On Wed, Oct 5, 2016 at 7:52 PM, Christopher Schultz <
chris@christopherschultz.net> wrote:

> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA256
>
> Ted,
>
> On 10/5/16 6:47 PM, Ted Spradley wrote:
> > Chris,
> >
> > On Wed, Oct 5, 2016 at 5:14 PM, Christopher Schultz <
> > chris@christopherschultz.net> wrote:
> >
> > Ted,
> >
> > On 10/5/16 6:10 PM, Ted Spradley wrote:
> >>>> Chris,
> >>>>
> >>>> Thanks for your response.
> >>>>
> >>>> On Wed, Oct 5, 2016 at 3:14 PM, Christopher Schultz <
> >>>> chris@christopherschultz.net> wrote:
> >>>>
> >>>> Ted,
> >>>>
> >>>> On 10/5/16 3:42 PM, TED SPRADLEY wrote:
> >>>>>>> Tomcat 7.0.68 Apache 2.4.6 CentOS  7.2.1511
> >>>>
> >>>> Thanks.
> >>>>
> >>>>>>> Problem: A Tomcat application at context "/mycontext"
> >>>>>>> on port 8081 running through Apache proxy renders as
> >>>>>>> expected when using http://example.com/mycontext but
> >>>>>>> https://example.com/mycontext call renders "The
> >>>>>>> requested URL /mycontext/ was not found on this
> >>>>>>> server."
> >>>>>>>
> >>>>>>> Question: Do I have a Tomcat Connector configuration
> >>>>>>> problem? Or an Apache proxy configuration problem? Or
> >>>>>>> an Apache ssl.conf problem?
> >>>>>>>
> >>>>>>> Note: the CA issued certificate appears to be properly
> >>>>>>> installed as evidence by the lock icon in the url bar
> >>>>>>> displaying "Verified by Š " when doing a mouseover.
> >>>>>>>
> >>>>>>> Files: Httpd.conf - <VirtualHost *:80> ServerName
> >>>>>>> www.example.com ServerAlias *.example.com ProxyRequests
> >>>>>>> off ProxyPass /mycontext
> >>>>>>> http://example.com:8081/mycontext ProxyPassReverse
> >>>>>>> /mycontext http://example.com:8081/mycontext
> >>>>>>> </VirtualHost> <VirtualHost *:443> ProxyRequests
off
> >>>>>>> ProxyPreserveHost on SSLEngine on SSLCertificateFile
> >>>>>>> /path/to/certs/ca.crt SSLCertificateKeyFile
> >>>>>>> /path/to/key/private/exampleDotCom.key ServerName
> >>>>>>> www.example.com ServerAlias *.example.com ProxyPass
> >>>>>>> /mycontext http://example.com:8081/mycontext
> >>>>>>> ProxyPassReverse /mycontext
> >>>>>>> http://example.com:8081/mycontext </VirtualHost>
> >>>>
> >>>> On first inspection, that looks correct.
> >>>>
> >>>>>>> Tomcat's server.xml Connector <Connector port="8081"
> >>>>>>> protocol="HTTP/1.1" connectionTimeout="20000"
> >>>>>>> proxyName="www.example.com" proxyPort="80"
> >>>>>>> redirectPort="8443" xpoweredBy="false" server="Apache
> >>>>>>> TomEE" />
> >>>>
> >>>> That also looks correct.
> >>>>
> >>>> How have you deployed your actual application?
> >>>>
> >>>>
> >>>>> Yes. It is deployed and responds as expected through the
> >>>>> proxy when using http.
> >
> > Great. But *HOW* have you deployed your actual application?
> >
> >
> >> Sorry, I missed the "How". I'm not sure what descriptors you are
> >> asking for when you ask how.
>
> Auto-deployed WAR file/directory? WAR/dir deployed via manager
> application? Explicit descriptor XML file placed in
> CATALINA_HOME/conf/[service]/[host]/[app].xml?
>
> Ah, yes.
1. WAR/dir deployed via manager application in
CATALINA_HOME/conf/Catalina/[host]/manager.xml
2. App directory is CATALINA_HOME/mycontextapps/mycontext/
with web.xml in CATALINA_HOME/mycontextapps/mycontext/WEB-INF/web.xml

I didn't dream up this location, I followed some example deployment of
multiple domains
with multiple apps each. Is the location of the app files causing the
problem? The multiple
domains with multiple apps all respond as expected using the proxy with
virtualhost *:80.

- Ted

- -chris
> -----BEGIN PGP SIGNATURE-----
> Comment: GPGTools - http://gpgtools.org
> Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/
>
> iQIcBAEBCAAGBQJX9aA5AAoJEBzwKT+lPKRYoxAP/2KTSxTMFqtpm3gYOphW1B1N
> Tx56YMCETDtihjLCtWuLQt0QSZ/u92Lbd+xg/aCM9SdkrQQkSby+h2oJuT2E5Dpb
> LkWpeODS1xp93l0UO4eTp1RW46ToHZHlVABlYDkr27LPrIqYrtntyCLNPTr3N1Xo
> ExBzvZxxM5C36uDVtnrrNxay/qKpq/sOJaW84yc161eXhrHvXh5wQF76hTGJswbs
> OQapt+VCzDRcaQVeHpBXm6JvfSwFfjbflgpAcPen/Mwu1sgqeNicOKNd5kBnL2pJ
> 7NOEyMIJnVMaZ9hdu/9HF4fVo307ix7n2yjm3JAMZcb3+2GRD3Zw8e6/+YIk7gRI
> 8n8I8Q/zW8qEG9S5jqsX7Gb7wF2ZZUKc7xOOpGQy4Ctoa0RizFxipfQB77OhNzeu
> 9txqUgks+AvjVV3aCEWMeyqhC9n8QPxws3Sc9A8MxQ4IqII9KWgsP3tQT2iqZukj
> kXH1L5ELbe4CIFQBCxVS4BsvnFzGm96iz4DzkIRUnHGL0ipHXoWlQBXPjxFwudw2
> N7Ln+os14LZvnHFLSV1UDpEkB7pfWvIRAiRqavYx42gPpwXxx3MiImuevr+LDRbw
> ublChOTt1yzsWNQIYspwGt8srDtBIW7rZZggqVmds9NmD+d3tLHoxfJ3bm7Cc9qA
> lm7rwoaI3foiJ2Jnpn0D
> =B1CN
> -----END PGP SIGNATURE-----
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
> For additional commands, e-mail: users-help@tomcat.apache.org
>
>

Mime
  • Unnamed multipart/alternative (inline, None, 0 bytes)
View raw message