I have Tomcat and Apache web server. by MOD_JK I configure Apache to send request for http://127.0.0.1/cas to Tomcat.
http://127.0.0.1/cas works correctly and Tomcat response to it.
now I want this https://127.0.0.1/cas to work, (SSL).
I search it and found that I need Virtualhost on Apache that send requests to Tomcat, my question is how can I create a SSL Virtualhost?
and should I remove all configuration that I create before this for http://127.0.0.1/cas?

link|improve this question

60% accept rate
feedback

1 Answer

up vote 1 down vote accepted

One vhost entry will reference :80 and the other :443

So for example (stripped down version) This assumes you never want to login with non-ssl.. So redirect to ssl

NameVirtualHost *:80
NameVirtualHost *:443

<VirtualHost *:80>
    ServerName login.domain.com
    Redirect / https://login.domain.com/

</VirtualHost>


<VirtualHost *:443>
    ServerName login.domain.com

    SSLEngine on
    SSLCertificateFile /etc/httpd/conf/login.domain.com.crt
    SSLCertificateKeyFile /etc/httpd/conf/login.domain.com.key
    SSLCipherSuite ALL:-ADH:+HIGH:+MEDIUM:-LOW:-SSLv2:-EXP

    ProxyPass / http://1.2.3.4:8080/cas
    ProxyPassReverse / http://1.2.3.4:8080/cas

</VirtualHost>

That also assumes tomcat has the ip of 1.2.3.4 and running on port 8080

link|improve this answer
why you don't use mod_jk? it's not useful for this issue? – Mohammad Ali Akbari Jan 18 '11 at 15:54
I don't want mod_jk running on the same web nodes that do php – Mike Jan 18 '11 at 18:58
what is wrong? I get this error from Mozilla Firefox "the page isn't redirecting properly", it's because loop in redirection, how can I solve it? – Mohammad Ali Akbari Jan 19 '11 at 11:56
feedback

Your Answer

 
or
required, but never shown

Not the answer you're looking for? Browse other questions tagged or ask your own question.