CAS 5 behind haproxy shows "Non-secure Connection"

[Tim McLaughlin]

Hello,

 

I have set up CAS 5.0.2 in Tomcat behind haproxy, with haproxy handling the SSL termination.  The connections to the user are https, but between haproxy and the CAS service it is just http.

 

Is there a way to tell CAS that this is OK?  I would like to avoid managing certificates in the container.

 

Thanks,

Tim McLaughlin

[RJ SSO]

Tim,

Tomcat should be listening on HTTPS, though HAProxy listens on HTTPS for the front end URL.

--
- CAS gitter chatroom: https://gitter.im/apereo/cas
- CAS mailing list guidelines: https://apereo.github.io/cas/Mailing-Lists.html
- CAS documentation website: https://apereo.github.io/cas
- CAS project website: https://github.com/apereo/cas
---
You received this message because you are subscribed to the Google Groups "CAS Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email to cas-user+unsubscribe@apereo.org.
To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/78FD080A-73FA-4F36-AADF-1CFADBF367DB%40wwu.edu.

[Jozef Kotlar - EEA.sk]

You can persuade Tomcat that connector is secure defining <Connector ... secure="true" />.

Jozef

[Tim McLaughlin]

This is great -- thank you!

--

- CAS gitter chatroom: https://gitter.im/apereo/cas
- CAS mailing list guidelines: https://apereo.github.io/cas/Mailing-Lists.html
- CAS documentation website: https://apereo.github.io/cas
- CAS project website: https://github.com/apereo/cas
---
You received this message because you are subscribed to the Google Groups "CAS Community" group.

To unsubscribe from this group and stop receiving emails from it, send an email to cas-user+u...@apereo.org.
To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/f0cefa91-1158-4899-9db8-bf4f173c2e1f%40apereo.org.

[yv Mu]

I' m facing the same problem, unfortunately, I'm using embeded tomcat.

Do you know how to configure the attribute for http connector in embeded tomcat?

I'm using v5.0.2, and I didn't found such property in official doc, also it doesn't seems possible to configure it (through the source code I can see).

Here is some references:

• https://apereo.github.io/cas/5.0.x/installation/Configuration-Properties.html#embedded-tomcat
  
• https://github.com/apereo/cas/blob/v5.0.2/core/cas-server-core-configuration/src/main/java/org/apereo/cas/configuration/model/core/ServerProperties.java
  
• https://github.com/apereo/cas/blob/v5.0.2/webapp/cas-server-webapp-config/src/main/java/org/apereo/cas/config/CasEmbeddedContainerConfiguration.java

在 2017年2月15日星期三 UTC+8下午10:39:15，Jozef Kotlar - EEA.sk写道：

[dkopy...@unicon.net]

You can do so programmatically. Set secure to true on the Connector object. Here's an example: https://github.com/spring-projects/spring-boot/blob/v1.5.1.RELEASE/spring-boot-samples/spring-boot-sample-tomcat-multi-connectors/src/main/java/sample/tomcat/multiconnector/SampleTomcatTwoConnectorsApplication.java

D.

--

- CAS gitter chatroom: https://gitter.im/apereo/cas
- CAS mailing list guidelines: https://apereo.github.io/cas/Mailing-Lists.html
- CAS documentation website: https://apereo.github.io/cas
- CAS project website: https://github.com/apereo/cas
---
You received this message because you are subscribed to the Google Groups "CAS Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email to cas-user+u...@apereo.org.

To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/ebc9c255-4509-42e0-b153-106da374b27f%40apereo.org.

[yv Mu]

Thx!

I don't wanna recompile, but seems no magic way to do.

To unsubscribe from this group and stop receiving emails from it, send an email to cas-user+unsubscribe@apereo.org.

To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/ebc9c255-4509-42e0-b153-106da374b27f%40apereo.org.

--

- CAS gitter chatroom: https://gitter.im/apereo/cas
- CAS mailing list guidelines: https://apereo.github.io/cas/Mailing-Lists.html
- CAS documentation website: https://apereo.github.io/cas
- CAS project website: https://github.com/apereo/cas
---
You received this message because you are subscribed to the Google Groups "CAS Community" group.

To unsubscribe from this group and stop receiving emails from it, send an email to cas-user+unsubscribe@apereo.org.

To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/b8ec26d8-35f3-4c16-a0b1-9a88dd592e97%40Spark.