Redirect WebLogic behind reverse proxy (https becomes http)

Hello
I have a problem with the redirects of weblogic switching protocol https, http when a user is redirected.
Here's my setup.

1. first of all, to everything there is a loadbalancer that ends the SSL. (BigIP)
2. in front of the weblogic application server is a reverse proxy to Apache. (www.external.com)
3 and behind the proxy of the weblogic server hosts the site.

Requests for outside is managed by the proxy in the following way when the user tries to access https://www.external.com/site1
ProxyPass /site1 http://inside.com/site1
ProxyPassReverse /site1 http://inside.com/site1

On the weblogic Server I've specified the host och port frontend Frontend to be external.com and 443.

My problem is that when a redirect occur, the user is redirected to http:// www.external.com/site1, not HTTPS.

Can I set up it works somehow?

Kind regards

Henrik

Hi Henrik,

You can set it up for you the server managed. Navigate to the managed server, then protocols and HTTP.

Find Frontend host and Port HTTPS Frontend.

But Weblogic need to know if she should use the HTTPS front-end Port or the Port HTTP Frontend. So in Apache, you have to set this:

RequestHeader set WL-Proxy-SSL true

I got this working with Weblogic 10.3.3 but when we went to 10.3.4 it has stopped working. I opened as SR which ended with Oracle saying the Apache/mod_proxy has been certified and the I use mod_wl instead.

For example, you might have some problems. :-(

Just had a quick glance at MOS and Oracle now has fessed up and found a fix. Check: WebLogic Server (WLS) 10.3.4 - HTTPS request headers showing that queries on WebLogic HTTP side [1318648.1 ID]

I just tested a TI work if I set WebLogic plugin active as described in note :-)

What about Peter

Published by: Peter Lorenzen August 3, 2011 19:13

Published by: Peter Lorenzen August 3, 2011 19:27

Tags: Fusion Middleware

Similar Questions

  • Proxy HTTPS without an SSL certificate

    Is it possible to configure the proxy HTTPS WSA without an SSL certificate? If so, what would be the features available? Other web and URL filtering reputations, I can't think of anything.

    You can't configure the HTTPS proxy without using a cert... This certificate may be the demo one delivered with the box or one of your friends, but it must have a cert.  Your desktops have either themselves trust manually or you will need to deploy some how so his confidence (if you do not they will always have cert warnings).

    If you do not use the HTTPS proxy, so yes, all you get is the base url, web reputation filtering for https traffic category.  HTTP traffic you will get again STROKE, Anti Malware, etc...

  • Rotation TIFF files overview reverse colors (black becomes white and white black). Is this a bug?

    Rotation TIFF files overview reverse colors (black becomes white and white black). Is this a bug?

    Of course, sounds like it.  However I don't see this behavior on a test screenshot.

    Bug Reporter https://bugreport.apple.com/

  • Get the IP address of a reverse proxy client

    Hello
    I have an APEX application, users can access through a reverse proxy based on apache.
    Is it possible to get the IP address of the client, but not the proxy server.

    The OWA_UTIL. GET_CGI_ENV ('HTTP_X_FORWARDED_FOR') does not work for me.

    Published by: MickleSh on October 13, 2008 11:39

    Hello

    Have you tried as in this thread?
    Re: How to get the value of X-Forwarded-For?

    hope this helps

    Concerning
    Mozkavra

  • Why Firefox 18 behind a proxy server refuses all connections https?

    I used to have Firefox 17 and everything worked ok but I just installed Firefox 18 in my environment of Windows XP sp3 and I can't connect to https through proxy of the company sites.
    Company proxy requires LM/NTLM authentication, the proxy server is a machine IPCOP (squid proxy.)
    After the update to Firefox 18, for all sites that uses an https connection, the answer is:
    The proxy server refuses connections

                  Firefox is configured to use a proxy server that is refusing connections.
     Check the proxy settings to make sure that they are correct.
     Contact your network administrator to make sure the proxy server is
       working.
    

    Squid log shows lines with connection refused because of required authentication (domain/username and password) settings
    1357912572.640 1 (my IP) TCP_DENIED/407 1586 CONNECT www.orange.ro:443 - NONE/text/html
    As you can see no domain/username were filled in the newspaper.
    Here is a line with authorization from another browser
    1357920874.657 1348 (my IP) TCP_MISS/200 2549 CONNECT www.orange.ro:443 (mydomain\myusername) DIRECT/109.166.184.137-
    I changed the sensitive data

    Thank you

    I see a lot of proxy problems reported by users of Firefox 18. If you're not the only one with this problem.

    For now, I advise you to go back to Firefox 17.0.1 until Mozilla fixes this bug.

    Link:

    http://www.Mozilla.org/en-us/products/download.html?product=Firefox-17.0.1 & OS = Win & lang = en-US

    http://www.Mozilla.org/en-us/products/download.html?product=Firefox-17.0.1 & os = OSX & lang = en-US

  • LabVIEW can access a HTTPS site behind a proxy?

    I tried to use LabVIEW to access an https through our firewall/proxy business site and were unable to operate. Anyone has any experience with this and or should this be possible?

    With success, I was able to get the LV websites (http and https) access without going through a firewall and through messages on these forums figured out how to access http site through the firewall, but have developed in white when you try all https sites. Here are a few test cases, I've tried. All these sites are easily accessible via browsers, so it is not because of the firewall/proxy iblocking.

    Any help would be appreciated,

    -Harold

    Well, now I understand your configuration. Unfortunately the HTTP client supports only the tunneling proxies (sometimes called gateway proxies, those who accept a connection and then move the application to another server without modifying it) because they occur without intervention of the customer. It is not supported for HTTP proxy servers (sometimes called proxies forward) which, as you have noticed, ask the customer to send a CONNECTION request to the proxy via the SSL protocol.

    To use the HTTP client here, you must configure your proxy to accept HTTPS connections on a different port using a valid SSL certificate and then forward these requests to the remote server as a proxy tunneling.

  • Client certificate authentication and proxy HTTPS WSA

    Hello

    on a clients site, we have a virtual Proxy WSA with WCCP running behind a firewall of ASA. Only we are facing a problem: the customer has a site that authenticates the client through the certificate. It does not work. If I dasable the transparent proxy for this host, everything works fine.

    I solved it now bypassing the proxy server for the spicific site. Is there another solution to allow clients to authenticate using certificates to a Web site?

    Hello

    Does it means that websites (some sites) request for client certificate to authenticate during the SSL negotiation?

    If this is true, can you check your option since default CLI interface HTTPS when HTTPS servers request certificate of the client during the handshake, WSA will respond with unavailable certificate and the handshake will normally be breaks.

    To check this:

    1. log in to the CLI
    2. control of type advancedproxyconfig
    3. type HTTPS
    4. keep pressing enter to accept the value by default until you reach "measures to be taken when the HTTPS servers request certificate of the client during the handshake:" and change it to "get through the operation.

    5. keep pressing enter until the initial scope guest
    6. type commit to save the change.

  • Proxy HTTPS errors

    I run a Setup with SSL unpack - aka the HTTPS proxy
    I'm starting to see websites giving warnings, such as:

    the Setup is WSA S360 version 7.7.0 - 761-latest and CAP file for parameters to customers
    This PAC file is GPO'ed to windows clients. CERT of internal PKI are imported on WSA and works on many many sites

    https://registration.preemptive.com
    -Use a GoDaddy Cert

    https://support.Logitech.com/
    -Using a DigiCert Global

    I see weak encryption (128-bit) in a self-contained outside the PC, in the two URLS, and I see warning in chrome

    But above all, I see the WSA giving warnings in the client browser, and I have a few tools that uses the proxy settings in the App, but omits simply theses apps.
    I guess they can't manage warnings and then just exsist...

    I have a category/policy work around, but I want to really just unpack to work and not to work around.

    What can we do?

    The WSA HTTPS proxy sometimes fails on intermediary certificates.  If you download

    On a box that is not behind the WSA (net by example separate, bypass, etc.) go to the web pages that you are experiencing this issue with.  Click on the "lock" icon in the address box and download each of the certificates.

    Then on the WSA, go Security Services/HTTPS Proxy.  Click on the "managed trust roots" near the bottom.  Import the certificates that you have downloaded... Usually you can just do the intermediaries and not the roots as the WSA already has them (eg. "On the list of Cisco" = yes).  For some reason, I had to keep the MS one 2011...

    Here is what mine looks like.

  • the service of Proxy HTTPS url conversion

    Hello

    Based proxy wsdl based service is accessible via http://nomh get: port/ProxyServiceName I wan t to my proxy service to host a url https://hostname:port / ProxyServiceName and wsdl for this power of Attorney must also be accessible using https://hostname:port / ProxyServiceName? WSDL, I checked the required checkbox HTTPS and when I type the url https://hostname:port / ProxyServiceName it does not open, but the port is changed to https://hostname:7002 / ProxyServiceName can someone help me as well as I can also change HTTPS without changing the port.

    Rgds,
    Rahul

    Rahul,

    Enable SSL on your Weblogic Server and set the value of the port SSL listening the current value of the listening port and change the value in the listening Port.

    http://docs.Oracle.com/CD/E17904_01/Web.1111/e13707/SSL.htm#i1200848

    Kind regards
    Anuj

  • Firefox is not redirect when it gets an HTTP 302

    After completing a simple form on this page:
    https://bitdango.com/register/email

    The page should redirect to this page:
    https://bitdango.com/register/verify

    Instead, nothing happens. The browser is not simply redirect.

    I tried a relative and full URLS in the 'Place' of the redirection property, nor work.

    Why not the browser redirect? Users begin to use Chrome instead of Firefox because of this.

    I'm glad you solved the problem. Information on SPDY to https://en.wikipedia.org/wiki/SPDY .

    To avoid other people have this problem, I suggest that report you it as a bug through https://bugzilla.mozilla.org/.

  • 20 Firefox cannot properly authenticate with proxy http squid (windows domain authentication).

    Since autoupdate version FF 19-20 I can't access sites through our http proxy of squid in authentication field. Problem is the same on 2 PC with Windows XP and with Windows 7. IE and older FF versions works fine.

    Problem is NOT related to foxy proxy - I already tried without any add-ons.

    With https connections, FF informed just thath Microsoft proxy server connection refused.
    With squid http error page appears:

    ERROR
    Cache access denied.

    The following error was encountered trying to retrieve the URL: http://www.mozilla.org/

       Cache Access Denied.
    

    Sorry, you are currently not allowed to ask http://www.mozilla.org/ this cover until you yourself have authenticated.

    Please contact the administrator of the cache if you have trouble you authenticate or change your default password.

    Generated on Tuesday, April 9, 2013 19:19:13 GMT by proxy (squid/3.1.6)

    It seems that this problem has been fixed in 20.0.1

  • Mgt session in the Service of Proxy HTTP Oracle Service Bus

    Hi all

    Even if it is not advisable to keep the session in osb Service Proxy.

    We need to keep it. If you are looking for the best option to do if there is.

    My requirement is

    When the user calls PingProxyService - we get the sessionid in the request (I am assumin I can retrieve http request... Qustion1-pls sugest exactly how I need to get this value http req)

    and place this session id in DB with a session as primary key id and a flag indicating session is InProgress.

    There is more a Proxy service that is the connection service

    in this service I get UN/pw and session id of the request and I check with the session id existing in db if it matches I also authentiate the user with us / pw and if the success connection is seccussfull.

    then user calss service - in this proxy executeProxy I again to retrieve the session ID and compare them with entry into DB. If it matches, and its flag is InProgress, I let go the reuest continuation of the procedure. If this is not avaialable or its flag is none other than InProgress I'll by mistake.

    I finally axpose a proxy more for Logut.

    LogoutProxy - when I get home I ask retive sessionid and chek the flag. If its InPrgress I update the indicator wiith Logout.

    Please sugest if I can implement above in osb. I would like to know if there is any apporches do better in osb.

    Thank you.

    Published by: user13839798 on 8 August 2012 06:54

    I'll risk to say that it is probably doable using the OSB... But my mind refuses to think he's further... IMHO, it's like to unscrew a screw tight using a table instead of the proper screwdriver knife... It will probably do the job, but it will take twice as long and it can eventually damage the knife and the screw a little...

  • Why am I redirected to the site web https

    I have a site now, it doesn't matter the name of the site, really, but when I goto, it redirects me http: https:, it is a blank site with an empty index file, this happens only on this one site and ONLY happens in firefox, chrome, IE, edge, etc., all of this hard work. I have cleared the cache, history, everything, uninstalled firefox, resintalled, etc., always it redirects me to HTTPS on this one area, this is a new area, I installed on my hosting, it is obviously a bug with firefox, is it possible to prevent him from doing that? (I even made the subject: config and turned stuff url so what - not) It's firefox 49.01

    You know what is maybe faster is:

    • Open the dialog library of your story, be

      • CTRL + SHIFT + h
      • "Show all history".
    • Right click on an entry from the history of the site and "forget this Site".

    Which should remove all data, including the cache, history, cookies, bookmarks, AND all saved flag HSTS.

  • Flash cards behind a Proxy Server

    Hi guys to!

    I noticed a few threads about the same problem in this Forum as well. but do not see the answer here.

    I have a database of Oracle 11 g with APEX 3.2 using the pl/sql gateway embedded on my home server and use http Apache 2.2 as a proxy server for my applications. I'm running several applications apex, with a wide variety of areas. All works quite nice. A got the app running and everything happens very nice...

    Except in my applications flash cards...

    I've noticed that I needed to change the variable #HOST # in order to make them work in my environment, but is a "global" variable only? Or y at - it a (simple) way to make them work correctly without hasle by application?

    for example: I want to APEX application executes 100 on apex1.com, apex app 200 on apex2.com.

    Any thoughts?


    Kind regards

    Douwe Pieter

    Douwe,

    #HOST # seems to be set by the engine of the APEX, and in the current state, we have no control over what it gets the value.

    The improvement would be nice to implement to perhaps even the level of the Application, so that in your situation, you could control HOST for each application.

    Thank you

    -Scott-

    http://spendolini.blogspot.com/
    http://sumnertech.com/

  • OAAM: IP address of the Client behind ISA Proxy, UIO

    I have a UIO of OAAM deployment behind an ISA proxy server. My problem is that all requests, such as reported in OARM, seem to come from the IP address of the proxy server. I changed the option in ISA server to "requests appear to come from the original client" and breaks everything. What are the other passage options the customer address IP OAAM? At this point geo-location is unnecessary.

    Add the following query interceptor to your UIO proxy configuration:

    < RequestInterceptor id = "AddBharosaUserHeaders" desc = "Add BharosaUserHostAddress, BharosaUserHostName headers" isGlobal = "true" >
    < condition >
    "< name VariableValue ="%URL"value =" "/ bharosauio" mode = "starts - with" case ignore = "true" / >
    < / conditions >
    < filter >
    < name AddHeader = "" BharosaUserHostName: "value ="% hote_distant"/ >"
    < name AddHeader = "" BharosaUserHostAddress: "value ="% REMOTE_ADDR"/ >"
    < / Filters >
    < / RequestInterceptor >

Maybe you are looking for

  • Satellite X 200-CD/DVD disappeared - error code 19

    Hi all, new here. After the recent activity of the serious virus on my laptop (X 200) I had to reinstall vista. Therefore, downloading 150000 updates, which took almost a week lol. Somewhere along the line here my drive CD/DVD stopped working. When I

  • HpG61: Hard drive error

    I ran HP hard drive Check and it says check hard drive HP detected on drive a SMART check the issue. I also ran check disk hard on initialize and no error detected while one is more precise, the first indicates the SMART threshold has been exceeded a

  • C6380 - 0xc19a0023 ink system failure error message

  • My dial-up does not work because MSN went to Microsoft Int. Exp.

    To get online I have to click 'Start', and then when the 'messenger' icon appears left-click on it, then click on "MSN homepage. I can do it only with the network (LAN), that I am bound apart from my dial-up. If it wasn't for the network I wouldn't t

  • Error 80224800 has "can not search for new updates"

    This has been driving me crazy. I get this whenever I have to manually search for updates of Windows (Win8). I do now so that I can update to Win8.1. Not found NO answer in the community or messages of support.