Return-Path: X-Original-To: archive-asf-public-internal@cust-asf2.ponee.io Delivered-To: archive-asf-public-internal@cust-asf2.ponee.io Received: from cust-asf.ponee.io (cust-asf.ponee.io [163.172.22.183]) by cust-asf2.ponee.io (Postfix) with ESMTP id CA802200BA3 for ; Thu, 6 Oct 2016 00:47:08 +0200 (CEST) Received: by cust-asf.ponee.io (Postfix) id C92C6160AEA; Wed, 5 Oct 2016 22:47:08 +0000 (UTC) Delivered-To: archive-asf-public@cust-asf.ponee.io Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by cust-asf.ponee.io (Postfix) with SMTP id DEAE6160ADE for ; Thu, 6 Oct 2016 00:47:07 +0200 (CEST) Received: (qmail 97814 invoked by uid 500); 5 Oct 2016 22:47:06 -0000 Mailing-List: contact users-help@tomcat.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: "Tomcat Users List" Delivered-To: mailing list users@tomcat.apache.org Received: (qmail 97803 invoked by uid 99); 5 Oct 2016 22:47:05 -0000 Received: from pnap-us-west-generic-nat.apache.org (HELO spamd4-us-west.apache.org) (209.188.14.142) by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 05 Oct 2016 22:47:05 +0000 Received: from localhost (localhost [127.0.0.1]) by spamd4-us-west.apache.org (ASF Mail Server at spamd4-us-west.apache.org) with ESMTP id 8772FC0C69 for ; Wed, 5 Oct 2016 22:47:05 +0000 (UTC) X-Virus-Scanned: Debian amavisd-new at spamd4-us-west.apache.org X-Spam-Flag: NO X-Spam-Score: 1.18 X-Spam-Level: * X-Spam-Status: No, score=1.18 tagged_above=-999 required=6.31 tests=[DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=2, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001, WEIRD_PORT=0.001] autolearn=disabled Authentication-Results: spamd4-us-west.apache.org (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mx2-lw-eu.apache.org ([10.40.0.8]) by localhost (spamd4-us-west.apache.org [10.40.0.11]) (amavisd-new, port 10024) with ESMTP id P8Bok0tVkf9a for ; Wed, 5 Oct 2016 22:47:03 +0000 (UTC) Received: from mail-qt0-f181.google.com (mail-qt0-f181.google.com [209.85.216.181]) by mx2-lw-eu.apache.org (ASF Mail Server at mx2-lw-eu.apache.org) with ESMTPS id 4A8E75F393 for ; Wed, 5 Oct 2016 22:47:02 +0000 (UTC) Received: by mail-qt0-f181.google.com with SMTP id m5so926832qtb.3 for ; Wed, 05 Oct 2016 15:47:02 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:from:date:message-id:subject:to; bh=czn+ZrKrWEbEkykAUmDzY8JZfPHwXyo/3nqnb9s2Vrg=; b=d4qXWBOunXDKWH0GwGsx77Av4byBbTa3XZFvac2Igdv2XlPz4qrs3dRWnWGSsZkLgP /yajT/FtAPQ1gvL5Z3aidtAyFlDV2I8Dx0ChXyFU0KcRJH75A0rUbqfEbTahJ3rhjt/M 164JsSjZlFhk4wivu7V0qNYWDGVNdshFUfH4n1oaZATA8dGV9bBG2NBlOp970BtOum2z H0K0Exv08I4xTilYNS0gMiqWstnGADoPBiH7cFjHnImV29P78PrcDubIk1n6/9QnKZCS LCSpDgaSYNtlQPcdL4d4LNgtKJNOTE6ydRIGPDEeyvIofBnt1XH3bICGaEm6t+Cg/gax Awaw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to; bh=czn+ZrKrWEbEkykAUmDzY8JZfPHwXyo/3nqnb9s2Vrg=; b=InG3JtI0IvYUlzMomXKWycrwb4u2YwLCvizttxa/QpdpfvQ90/Lcg+aWwL7SWGMjOq cUagMvEOtBFKJpMO7NewJ6VbXsb21lRdk+wUOUR/1x7Cljjv+iSDdfWFO5n5OPCoPR4D JQj+NsF4DI3+rpZburVViyK0aKh8Myddh9AUb8J6CTguRklZCblwUMLdFKKpFJiwOT0B oP6pxxtxyWbGY6Yu2tNvdG/rNc5NXysz4ueuIjA4XzZ6Dgw3BZmcxVjwlvJTtZhq4zZS OxkzI6udqjmsSoCCW9AoB9SDyntarPMAiK0To+DwcfuRyr1411YeBGo3yUwypF8Vxz6V pLjw== X-Gm-Message-State: AA6/9RncuBrrmSkEzW102bzQG33ImkzmDmdZAqoLSHqn9N5Yum31cYgomT8OQGrn2+pzWA1HIgnp9Zpcuz4ycg== X-Received: by 10.237.48.161 with SMTP id 30mr11927911qtf.117.1475707621094; Wed, 05 Oct 2016 15:47:01 -0700 (PDT) MIME-Version: 1.0 Received: by 10.200.35.26 with HTTP; Wed, 5 Oct 2016 15:47:00 -0700 (PDT) In-Reply-To: <82dec4e7-4f8a-aa9e-cc06-b1f4587c32e2@christopherschultz.net> References: <82dec4e7-4f8a-aa9e-cc06-b1f4587c32e2@christopherschultz.net> From: Ted Spradley Date: Wed, 5 Oct 2016 17:47:00 -0500 Message-ID: Subject: Re: Proxy Apache https to Tomcat http To: Tomcat Users List Content-Type: multipart/alternative; boundary=94eb2c0cb03a8c3d6d053e25f405 archived-at: Wed, 05 Oct 2016 22:47:09 -0000 --94eb2c0cb03a8c3d6d053e25f405 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable Chris, On Wed, Oct 5, 2016 at 5:14 PM, Christopher Schultz < chris@christopherschultz.net> wrote: > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA256 > > Ted, > > On 10/5/16 6:10 PM, Ted Spradley wrote: > > Chris, > > > > Thanks for your response. > > > > On Wed, Oct 5, 2016 at 3:14 PM, Christopher Schultz < > > chris@christopherschultz.net> wrote: > > > > Ted, > > > > On 10/5/16 3:42 PM, TED SPRADLEY wrote: > >>>> Tomcat 7.0.68 Apache 2.4.6 CentOS 7.2.1511 > > > > Thanks. > > > >>>> Problem: A Tomcat application at context "/mycontext" on port > >>>> 8081 running through Apache proxy renders as expected when > >>>> using http://example.com/mycontext but > >>>> https://example.com/mycontext call renders "The requested URL > >>>> /mycontext/ was not found on this server." > >>>> > >>>> Question: Do I have a Tomcat Connector configuration problem? > >>>> Or an Apache proxy configuration problem? Or an Apache > >>>> ssl.conf problem? > >>>> > >>>> Note: the CA issued certificate appears to be properly > >>>> installed as evidence by the lock icon in the url bar > >>>> displaying "Verified by =C5=A0 " when doing a mouseover. > >>>> > >>>> Files: Httpd.conf - ServerName > >>>> www.example.com ServerAlias *.example.com ProxyRequests off > >>>> ProxyPass /mycontext http://example.com:8081/mycontext > >>>> ProxyPassReverse /mycontext > >>>> http://example.com:8081/mycontext >>>> *:443> ProxyRequests off ProxyPreserveHost on SSLEngine on > >>>> SSLCertificateFile /path/to/certs/ca.crt > >>>> SSLCertificateKeyFile /path/to/key/private/exampleDotCom.key > >>>> ServerName www.example.com ServerAlias *.example.com > >>>> ProxyPass /mycontext http://example.com:8081/mycontext > >>>> ProxyPassReverse /mycontext http://example.com:8081/mycontext > >>>> > > > > On first inspection, that looks correct. > > > >>>> Tomcat's server.xml Connector >>>> protocol=3D"HTTP/1.1" connectionTimeout=3D"20000" > >>>> proxyName=3D"www.example.com" proxyPort=3D"80" > >>>> redirectPort=3D"8443" xpoweredBy=3D"false" server=3D"Apache TomEE" > >>>> /> > > > > That also looks correct. > > > > How have you deployed your actual application? > > > > > >> Yes. It is deployed and responds as expected through the proxy > >> when using http. > > Great. But *HOW* have you deployed your actual application? > Sorry, I missed the "How". I'm not sure what descriptors you are asking for when you ask how. > - -chris > -----BEGIN PGP SIGNATURE----- > Comment: GPGTools - http://gpgtools.org > Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ > > iQIcBAEBCAAGBQJX9XsvAAoJEBzwKT+lPKRYYJYQALKX6jEiUlcQQ2fXCq6a017F > /6rVjJ36ptaaQQ6O2xYLDI+efHASKK0swg6zwxtR10F9PepcXKreTGIGjvzT4vG3 > hvXuWtrKRVyOXDAhkdzXjAmwdovj+3vRf7Qm+GrpAMCI+Fi/GYyCsW2a7Opdlhnh > fWTwz3PVcuJ0+N7wFX55hChm0NjX9P1T6CLxJ7k1Q//vr+PqBUyJiNO1FRuoS1+D > vJOI2Ixm7E/tXCRc81aZA572fXIV78gcJmbHkERpy5WOW+G6UIG1XKNxqF4Afpqj > bL8dPNj22fZRu/qyIpYGVdMfyaSFkbfWP8jM8eQS9fLs9t+BPgzyt/Z0wxhsEVDT > EY/E9qAUr2Ai3TFlgZOz79ED1VQkVDTMlpZQ/w9XsyLjT518KKPBT6v665wVfeaV > N+uxoIGj4Ew37Xcm2RAXkv5BuomdqhtkpJ2n/BZ/pXxUQwpo57mDyBUDoVnSouuS > eC+vmcjroeq73dPE07PNRJpphjw8K5uZCo+en+qH1kVhwe2O8JNtjy5wkjslcdKF > +2vwlUFdoPO+8bhNu8PfsK6XZOJ0Uejf7iogb8OXr3SRjPF8qYnz28OBiAV3NC5E > dq8Do2mFWcWFTi+uV9axQl4+iAr+3P/g8sZJ8CTtySFfQBmBJky6xOIKtbshxRiI > mdFOlM+R4jw1wnwWE5Hp > =3DkOrd > -----END PGP SIGNATURE----- > > --------------------------------------------------------------------- > To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org > For additional commands, e-mail: users-help@tomcat.apache.org > > --94eb2c0cb03a8c3d6d053e25f405--