November 2017
Intermediate to advanced
542 pages
14h 24m
English
This section is intended to help set up Tomcat to use SSL when using an SSL termination. The idea is that an external entity, such as a load balancer, manages the SSL connection instead of Tomcat. This means that the connection from the client (that is, the web browser) to the load balancer is over HTTPS and is secured. The connection from the load balancer to Tomcat is over HTTP and insecure. For this sort of setup to provide any layer of security, the connection from the load balancer to Tomcat should be over a private network.
The problem this setup causes is that Tomcat will now believe that the client is using HTTP and thus redirects will be sent as though there is an HTTP connection. To get around ...
Read now
Unlock full access