Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I am having troubles configuring JBoss for a secure environment.

Here's our environment:

We have an F5 Loadbalancer which has our domain's wildcard certificate.

I have several applications running on JBoss on a server called peanut.

From within our firewall, I can run the application as

From the other side of the firewall, the server is only accessible over HTTPS under the subdomain

The Loadbalancer has the certificate. So any requests for reach the Loadbalancer securely. Between the Load Balancer and peanut, the requests are http.

Now this app uses AJAX calls and web services. From outside the Loadbalancer, I call - but because the communication between the Loadbalancer and peanut is http, the webpage returned references is not accessible anywhere, and the AJAX calls fail.

My question is, how do I configure JBoss to use https always, but without needing a it's own certificate?

This is what I have, and it is not working. I don't think I need to redirect to port 8443, because there is no secure connection between the firewall and the jboss server.

<Connector port="8080" address="${jboss.bind.address}"    
     maxThreads="250" maxHttpHeaderSize="8192"
     emptySessionPath="true" protocol="HTTP/1.1"
     enableLookups="false"  acceptCount="100"
     connectionTimeout="20000" disableUploadTimeout="true" scheme="https" />
share|improve this question

migrated from Apr 26 '11 at 8:09

This question came from our site for professional and enthusiast programmers.

Try adding secure=true to your connector. Assuming your application is depending on the result of "request.isSecure()" to determine whether or not to use https when building those references, that would solve the problem.

share|improve this answer

You need to configure your F5 device to do URL rewriting, and probably also to add the ProxyPass iRule (registration required) mentioned at the bottom of that article.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.