Re: [keycloak-user] Significant SSL issue: Support for reverse proxies
When does it forward the browser from https to http?
As Bill pointed out, does auth-server-url in your keycloak.json point to your proxy with
https?
What adapter are you using?
----- Original Message -----
From: "Josh" <smysnk(a)gmail.com>
To: keycloak-user(a)lists.jboss.org
Sent: Friday, 13 June, 2014 8:41:32 AM
Subject: [keycloak-user] Significant SSL issue: Support for reverse proxies
Hi guys,
So looking to help solve this issue possibly or at least get it on the radar,
I've reported it here: https://issues.jboss.org/browse/KEYCLOAK-497
To breifly recap the issue, when logging in via reverse proxy it keeps
forwarding the browser from https back to regular http.
Eg. Apache virtualhost configured as:
<VirtualHost *:443>
ServerName auth.domain.com
SSLEngine On
<Proxy *>
Order deny,allow
Allow from all
</Proxy>
ProxyVia Off
ProxyPreserveHost On
ProxyRequests Off
ProxyPass / http://keycloak.core.docker:8080/
ProxyPassReverse / http://keycloak.core.docker:8080/
</VirtualHost>
If I were to start looking into the code base, where would I start? Trying to
find for example during the login process how the forward url is formed?
Thanks,
Josh
_______________________________________________
keycloak-user mailing list
keycloak-user(a)lists.jboss.org
https://lists.jboss.org/mailman/listinfo/keycloak-user