https://issues.apache.org/bugzilla/show_bug.cgi?id=55553

            Bug ID: 55553
           Summary: Proposal: Allow
                    org.apache.catalina.valves.RemoteIpValve to set
                    requests as secure with a transparent SSL termination
                    proxy
           Product: Tomcat 7
           Version: trunk
          Hardware: PC
                OS: Linux
            Status: NEW
          Severity: enhancement
          Priority: P2
         Component: Catalina
          Assignee: dev@tomcat.apache.org
          Reporter: k...@ytterhaug.com

Created attachment 30822
  --> https://issues.apache.org/bugzilla/attachment.cgi?id=30822&action=edit
Patch for RemoteIpValve.java

I've created a patch for org.apache.catalina.valves.RemoteIpValve which will
allow configuring the Valve to set requests as secure based on the
protocolHeader and protocolHeaderHttpsValue when RemoteAddr is the actual IP
for the client and not a known Proxy.

This is useful when having a transparent SSL termination proxy which is only
setting an x-forwarded-proto header and is not changing RemoteAddr or adding an
x-forwarded-for header.

-- 
You are receiving this mail because:
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org

Reply via email to