https://bz.apache.org/bugzilla/show_bug.cgi?id=66556

            Bug ID: 66556
           Summary: Addind RemoteIpValve redirects the requests to http
                    port instead of expected https.
           Product: Tomcat 8
           Version: 8.5.86
          Hardware: All
                OS: Linux
            Status: NEW
          Severity: normal
          Priority: P2
         Component: Catalina
          Assignee: dev@tomcat.apache.org
          Reporter: son...@vmware.com
  Target Milestone: ----

As per the STIG requirement we added the remoteIpValve for logging the clientIp
in logs, after adding remoteIpValve requests are redirects to a URL using the
http protocol instead of the expected https protocol. For all requests we are
getting 302 http status.

Below code we added : 

<Valve className="org.apache.catalina.valves.RemoteIpValve"
    remoteIpHeader="x-forwarded-for"
    remoteIpProxiesHeader="x-forwarded-by"
    protocolHeader="x-forwarded-proto"
    protocolHeaderHttpsValue="https"
/>


Please let us know if any further modifications needs to be done while
configuring the tomcat.

-- 
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org

Reply via email to