Work at SourceForge, help us to make it a better place! We have an immediate need for a Support Technician in our San Francisco or Denver office.

Close

#46 no way to force scheme in request to be https

open
nobody
None
5
2011-02-10
2011-02-10
No

I want to use apache to proxy to an app contained in winstone (jenkins) and do the SSL in Apache. Unfortunately in this case, it seems that WinstoneRequest.getRequestURL() will always return an http url in this case, which is messing up my attempt to use openid.

One fix would be to respect the x-forwarded-proto header, which seems to be a very loose semi-standard, or alternatively just have a command line argument to allow overriding the default would be fine for me.

Discussion

    • summary: no way for force scheme in request to be https --> no way to force scheme in request to be https