Skip to end of metadata
Go to start of metadata

You are viewing an old version of this page. View the current version.

Compare with Current View Page History

« Previous Version 4 Next »

[11:04:30 CDT(-0500)] <athena> EricDalquist: have you run into server environments where java calls to request.getScheme() report HTTP, even though from the user perspective it's HTTPS?

[11:04:36 CDT(-0500)] <athena> usually a loadbalancer / firewall thing

[11:04:44 CDT(-0500)] <EricDalquist> no

[11:04:49 CDT(-0500)] <EricDalquist> but we always use AJP

[11:05:02 CDT(-0500)] <EricDalquist> primarily because of all of the issues with a https->http proxy

[11:05:16 CDT(-0500)] <athena> i get the impression this is more common when it's because of some kind of complex hardware-based loadbalancer

[11:05:27 CDT(-0500)] <athena> running into it right now, but we had some setups like that at yale

[11:05:32 CDT(-0500)] <EricDalquist> hrm

[11:05:40 CDT(-0500)] <athena> mostly wanted your perspective about how broken that is as a setup and whether we want to try to support it

[11:05:41 CDT(-0500)] <EricDalquist> so the portal is generating incorrect urls?

[11:06:09 CDT(-0500)] <athena> well the map portlet isn't working, because it tries to read a file it hosts via httpclient

[11:06:17 CDT(-0500)] <athena> and it's auto-generating the URL

[11:06:23 CDT(-0500)] <EricDalquist> oh ...

[11:06:25 CDT(-0500)] <EricDalquist> well that is bad

[11:06:33 CDT(-0500)] <EricDalquist> we have issues with that here

[11:06:36 CDT(-0500)] <EricDalquist> if one of our servers

[11:06:37 CDT(-0500)] <athena> similarly the google APIs are being included via http instead of https

[11:06:49 CDT(-0500)] <EricDalquist> tries to access my.wisc.edu

[11:06:56 CDT(-0500)] <EricDalquist> that server will drop off the network for ~2 minutes

[11:07:10 CDT(-0500)] <athena> ick

[11:07:12 CDT(-0500)] <EricDalquist> yeah

[11:07:24 CDT(-0500)] <EricDalquist> due to the network magic the layer4 load balancer does

[11:07:26 CDT(-0500)] <athena> so i mean i can just write some code that'll allow configuration of whether it should use http or https

[11:07:32 CDT(-0500)] <EricDalquist> so in general from what I've see

  • No labels