CAS Jboss AS7 HTTPS 重定向

发布于 2024-12-27 00:43:43 字数 1076 浏览 1 评论 0原文

如何将 Jasig 的 CAS 配置为仅侦听 HTTPS 端口 (8443)？

我们的应用程序分为两部分，门户和 SSO 权限 (JASIG CAS）。两者都运行在 JBoss AS7 和不同的机器上。门户和 SSO 权限配置为从 HTTP (8080) 端口重定向到 HTTPS (8443) 端口端口

<subsystem xmlns="urn:jboss:domain:web:1.0" default-virtual-server="default-host">
    <connector name="http" protocol="HTTP/1.1" socket-binding="http" scheme="http" redirect-port="8443"/>
    <connector name="https" protocol="HTTP/1.1" socket-binding="https" scheme="https" secure="true">
        <ssl name="https" password="pass" certificate-key-file="/path_to_keystore.jks"/>
    </connector>
    <virtual-server name="default-host">
        <alias name="myapp.domain.com"/>
    </virtual-server>
</subsystem>
...
<socket-binding name="http" port="8080" fixed-port="true" interface="public"/>
<socket-binding name="https" port="8443" fixed-port="true" interface="public"/>

重定向在门户部分运行良好，但 CAS 忽略重定向并在 http (8080) 上运行（显示有关非安全的信息）使用权）。

原文

How is it possible to configure Jasig's CAS to listen only on HTTPS port (8443)?

We have application divided into two parts, portal and SSO authority (JASIG CAS). Both are running on JBoss AS7 and different machines. Portal and SSO authority are configured to redirect from HTTP (8080) port to HTTPS (8443) port by

<subsystem xmlns="urn:jboss:domain:web:1.0" default-virtual-server="default-host">
    <connector name="http" protocol="HTTP/1.1" socket-binding="http" scheme="http" redirect-port="8443"/>
    <connector name="https" protocol="HTTP/1.1" socket-binding="https" scheme="https" secure="true">
        <ssl name="https" password="pass" certificate-key-file="/path_to_keystore.jks"/>
    </connector>
    <virtual-server name="default-host">
        <alias name="myapp.domain.com"/>
    </virtual-server>
</subsystem>
...
<socket-binding name="http" port="8080" fixed-port="true" interface="public"/>
<socket-binding name="https" port="8443" fixed-port="true" interface="public"/>

Port redirection works well on portal part, but CAS ignores the redirection and works at http (8080) as well (shows information about non-secured access).

分享到QQ

分享到微博

如果你对这篇内容有疑问，欢迎到本站社区发帖提问参与讨论，获取更多帮助，或者扫码二维码加入 Web 技术交流群。

发布评论

需要登录才能够评论，你可以免费注册一个本站的账号。

扬花落满肩 2025-01-03 00:43:43

对于正确的 Java Web 应用程序，必须进行 SSL 配置才能使应用程序的某些部分在 web.xml 文件中受到保护。然后重定向就完美了。

<security-constraint>
     <web-resource-collection>
         <web-resource-name>sso secured pages</web-resource-name>
         <url-pattern>/*</url-pattern>
     </web-resource-collection>
     <user-data-constraint>
         <transport-guarantee>CONFIDENTIAL</transport-guarantee>
     </user-data-constraint>
</security-constraint>

For correct java web app SSL configuration is necessary to make some part of application secured in web.xml file. Then redirect works flawless.

<security-constraint>
     <web-resource-collection>
         <web-resource-name>sso secured pages</web-resource-name>
         <url-pattern>/*</url-pattern>
     </web-resource-collection>
     <user-data-constraint>
         <transport-guarantee>CONFIDENTIAL</transport-guarantee>
     </user-data-constraint>
</security-constraint>

回复收藏 0 原文

~没有更多了~