During the implementation of a new servlet application on Tomcat we encountered an HTTP/HTTPS issue during redirects. The user would browse to a servlet via HTTPS, through a load balancer that handled SSL decryption, and during the execution of the servlet, they would be redirected to another URL. However, that redirect would be generated as a fully qualified HTTP address. This poses a problem. The page was originally requested as secure content, and the user is redirected to an insecure URL. Ultimately, the user sees a security warning. We figured it out by using the Tamper Data Firefox extension.
(more…)
Archive for the ‘Tomcat’ Category
HTTPS, Tomcat and Load Balancers.. Oh My!
Wednesday, August 22nd, 2007IRC Notification Bot
Monday, August 20th, 2007This was a fun little side-project we used to relay messages into IRC from linux servers when certain events occurred. The specific case was for Tomcat restarts. We wanted to know when startup.sh and shutdown.sh were executed. This would allow the helpdesk or the NOC to be notified if Tomcat was restarted inappropriately.
I used PircBot from Jibble, configured by Spring, to take inbound messages from a server and translate it into an IRC post within one or more channels.
(more…)