https://bz.apache.org/bugzilla/show_bug.cgi?id=59779
Mark Thomas <ma...@apache.org> changed:
What |Removed |Added
----------------------------------------------------------------------------
Status|NEW |RESOLVED
Resolution|--- |WONTFIX
--- Comment #3 from Mark Thomas <ma...@apache.org> ---
(In reply to NateC from comment #2)
> (In reply to Mark Thomas from comment #1)
> > I don't understand the problem. I think a concrete example is required.
>
> An example Connector configuration which would have this issue:
> <Connector
> protocol="org.apache.coyote.http11.Http11AprProtocol"
> port="80"
> secure="true"
> scheme="https"
> proxyPort="443"
> URIEncoding="UTF-8"
> />
>
> When a client makes a request to http://example.com/servlet/index.html and
> the servlet performs a redirect to "landingPage.html" when constructing an
> absolute URL the redirect is to
> "https://example.com:443/servlet/landingPage.html"; but when it is relative
> the url is just "landingPage.html", which the client will interpret as
> "http://example.com/servlet/landingPage.html";
Either there is a reverse proxy missing from the above description or scheme
and proxyPort are being mis-used to generate redirects to https when a
transport guarantee should be used.
--
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org
