HttpServletRequest.getRequestURL() returns 'http:' for https requests?

Thread view:

Simon Brooke - 13 Nov 2003 15:35 GMT

I've got a weird bug which I'm trying to characterise. Essentially I'm
calling HttpServletRequest.getRequestURL(). On my development machines
this works fine, but on one of my customer's production machines it
returns 'http://whatever' even when the request was an https
request. I'm not certain what JVM my customer is using or which
version of Tomcat (I've asked and hopefully will know soon).

Has anyone else seen this behaviour and if so what was the resolution?

Signature

simon@jasmine.org.uk (Simon Brooke) http://www.jasmine.org.uk/~simon/

IMHO, there aren't enough committed Christians, but that's care
in the community for you. -- Ben Evans

Reply to this Message

Sudsy - 13 Nov 2003 18:24 GMT

> I've got a weird bug which I'm trying to characterise. Essentially I'm
> calling HttpServletRequest.getRequestURL(). On my development machines
[quoted text clipped - 4 lines]
>
> Has anyone else seen this behaviour and if so what was the resolution?

I've seen this and it was because I didn't have a security provider
loaded which was SSL-aware. Check out the security.provider lines in
the $JAVA_HOME/jre/lib/security/java.security file.

If memory serves, this could be an older Java installation (<=1.3?)

and you'll need to locate and load JSSE.

Reply to this Message

Simon Brooke - 14 Nov 2003 14:05 GMT

> > I've got a weird bug which I'm trying to characterise. Essentially I'm
> > calling HttpServletRequest.getRequestURL(). On my development machines
[quoted text clipped - 12 lines]
>
> and you'll need to locate and load JSSE.

Thanks, that jogs my memory: we _have_ seen this before and that was
the right solution then. Interestingly I've since found that my
customer is running Blackdown 1.4 - I thought 1.4 had JSSE in
automatically, but perhaps the Blackdown doesn't.

Signature

simon@jasmine.org.uk (Simon Brooke) http://www.jasmine.org.uk/~simon/

I shall continue to be an impossible person so long as those
who are now possible remain possible -- Michael Bakunin

Reply to this Message

SIMOND YVES - 20 Apr 2005 12:47 GMT

Hi,

I have the same problem with a JSDK 1.3 installed. I am using Visual Age
and its Web Test Environnement and the stunnel software to "emulate" SSL
connection. My getRequestURL always returns HTTP instead of HTTPS even if
my request is HTTPS://blablabla..
I have looked into my java.security file, but I don't know what I have to
do with it... Could ou help me ?

Thanks

Reply to this Message

HttpServletRequest.getRequestURL() returns 'http:' for https requests?

Free Magazines