[#CONTINUUM-734] Can't use continuum behind https proxy - jira.codehaus.org

Details

Type: Bug
Status: Closed
Priority: Major
Resolution: Fixed
Affects Version/s: 1.0.3
Fix Version/s: 1.1-alpha-1
Component/s: Web interface
Labels:
None

Complexity:
Intermediate
Number of attachments :
1

Description

As noted in ~~CONTINUUM-240~~, it's not currentlyy possible to run the continuum webapp behind an https proxy, as all the links are http://...

My apache setup is something along the lines of:

<VirtualHost xx.xx.xx.xx:443>
    SSLEngine on
    ProxyPass         /  http://localhost:8080/
    ProxyPassReverse  /  http://localhost:8080/
    ProxyPreserveHost On
</VirtualHost>

and my jetty config:

<listeners>
              <http-listener>
                <port>8080</port>
              </http-listener>
            </listeners>

The links are correct, except that they have s/https/http/.

Why does the webapp need to use absolute links anyway?

More Options
- Sort By Name
- Sort By Date
- Ascending
- Descending
- Download All

Attachments

mod_proxy_http.so

18/Oct/06 7:40 PM

33 kB

Brian Fox

Issue Links

This issue is related to:
CONTINUUM-240	Absolute links bypass mod_proxy

Activity

Ascending order - Click to sort in descending order

Hide

Permalink

David Roussel added a comment - 14/Sep/06 5:05 AM

Can't you just go into http://localhost:8080/continuum/continuum/target/EditContinuumConfiguration.vm and change the Base URL to the https version?

Show

David Roussel added a comment - 14/Sep/06 5:05 AM Can't you just go into http://localhost:8080/continuum/continuum/target/EditContinuumConfiguration.vm and change the Base URL to the https version?

Hide

Permalink

Richard van der Hoff added a comment - 14/Sep/06 7:18 AM

No; the Base URL is used when generating error report emails and so on, but not when generating the page content.

Show

Richard van der Hoff added a comment - 14/Sep/06 7:18 AM No; the Base URL is used when generating error report emails and so on, but not when generating the page content.

Hide

Permalink

Carlos Sanchez added a comment - 18/Oct/06 1:25 PM

I think this is already fixed for 1.1

Show

Carlos Sanchez added a comment - 18/Oct/06 1:25 PM I think this is already fixed for 1.1

Hide

Permalink

Brian Fox added a comment - 18/Oct/06 7:40 PM

I was able to work around this using the http proxy reverse. This scans outbound html and replaces urls. The standard mod_proxy only scans the headers so it won't correct embedded links.

Attached prebuilt module for Windows/Apache 2.0.55. The source can be obtained here:http://apache.webthing.com/mod_proxy_html/
I added this file to the 2.0.55 mod_proxy_http module and rebuilt so this can replace the standard mod_proxy_http.so

In the config below, i redirect /continum to another machine mapped to /ts. Then I have the htmlurl map set to look for the url that continuum will return in its links and map it back to /ts.

RedirectMatch /continuum /ts/continuum/servlet/continuum
ProxyRequests off
ProxyPass /ts/ http://10.0.5.251:8080/
ProxyHTMLURLMap http://continum-machine:8080 /ts
ProxyHTMLURLMap http://10.0.5.251:8080 /ts

<Location /ts/>
ProxyPassReverse /
SetOutputFilter proxy-html
ProxyHTMLURLMap / /ts/
ProxyHTMLURLMap /ts /ts
RequestHeader unset Accept-Encoding
</Location>

Show

Brian Fox added a comment - 18/Oct/06 7:40 PM I was able to work around this using the http proxy reverse. This scans outbound html and replaces urls. The standard mod_proxy only scans the headers so it won't correct embedded links. Attached prebuilt module for Windows/Apache 2.0.55. The source can be obtained here:http://apache.webthing.com/mod_proxy_html/ I added this file to the 2.0.55 mod_proxy_http module and rebuilt so this can replace the standard mod_proxy_http.so In the config below, i redirect /continum to another machine mapped to /ts. Then I have the htmlurl map set to look for the url that continuum will return in its links and map it back to /ts. RedirectMatch /continuum /ts/continuum/servlet/continuum ProxyRequests off ProxyPass /ts/ http://10.0.5.251:8080/ ProxyHTMLURLMap http://continum-machine:8080 /ts ProxyHTMLURLMap http://10.0.5.251:8080 /ts <Location /ts/> ProxyPassReverse / SetOutputFilter proxy-html ProxyHTMLURLMap / /ts/ ProxyHTMLURLMap /ts /ts RequestHeader unset Accept-Encoding </Location>

Hide

Permalink

Jesse McConnell added a comment - 09/Mar/07 1:49 PM

emm, you got this working, right?

Show

Jesse McConnell added a comment - 09/Mar/07 1:49 PM emm, you got this working, right?

Hide

Permalink

Richard van der Hoff added a comment - 09/Mar/07 2:12 PM

No.

Various people have got this to work with ProxyPassReverse; however installing the relevant modules on the proxy was not an option for me.

It may well be fixed for 1.1; I haven't tested.

Show

Richard van der Hoff added a comment - 09/Mar/07 2:12 PM No. Various people have got this to work with ProxyPassReverse; however installing the relevant modules on the proxy was not an option for me. It may well be fixed for 1.1; I haven't tested.

Hide

Permalink

Richard van der Hoff added a comment - 09/Mar/07 2:14 PM

sorry, i mean ProxyHTMLURLMap, not ProxyPassReverse.

Show

Richard van der Hoff added a comment - 09/Mar/07 2:14 PM sorry, i mean ProxyHTMLURLMap, not ProxyPassReverse.

Hide

Permalink

Damon Rand added a comment - 10/Mar/07 1:59 AM

Though I use continuum at home this is the primary issue stopping us from using it where I work.. Sorry I haven't tried the latest builds either though..

Show

Damon Rand added a comment - 10/Mar/07 1:59 AM Though I use continuum at home this is the primary issue stopping us from using it where I work.. Sorry I haven't tried the latest builds either though..

Hide

Permalink

Emmanuel Venisse added a comment - 13/Mar/07 1:28 AM

http://docs.codehaus.org/pages/viewpage.action?pageId=73595

Show

Emmanuel Venisse added a comment - 13/Mar/07 1:28 AM http://docs.codehaus.org/pages/viewpage.action?pageId=73595

Hide

Permalink

Martin van den Bemt added a comment - 20/Apr/08 7:46 PM

When was this fixed ? In current trunk it doesn't work..

Show

Martin van den Bemt added a comment - 20/Apr/08 7:46 PM When was this fixed ? In current trunk it doesn't work..

Hide

Permalink

Martin van den Bemt added a comment - 21/Apr/08 3:22 AM

Please forget that last comment, it is working. With the move I just forgot to update portnumbers Sorry for the noise..

Show

Martin van den Bemt added a comment - 21/Apr/08 3:22 AM Please forget that last comment, it is working. With the move I just forgot to update portnumbers

Sorry for the noise..

Hide

Permalink

Martin van den Bemt added a comment - 21/Apr/08 8:13 AM

I will send in some documentation on how to get it working with jetty (didn't test if tomcat has the same problem, if I can make it generic, I can see if I can send a patch to continuum so it works out of the box).. When jetty redirects it constructs the Location header with the value of the absolute url, instead of the relative url.

Show

Martin van den Bemt added a comment - 21/Apr/08 8:13 AM I will send in some documentation on how to get it working with jetty (didn't test if tomcat has the same problem, if I can make it generic, I can see if I can send a patch to continuum so it works out of the box).. When jetty redirects it constructs the Location header with the value of the absolute url, instead of the relative url.

People

Assignee:

Emmanuel Venisse

Reporter:

Richard van der Hoff

Vote (2)

Watch (4)

Dates

Created:

23/Jun/06 5:20 AM

Updated:

21/Apr/08 8:13 AM

Resolved:

13/Mar/07 1:28 AM