[jboss-jira] [JBoss JIRA] (WFLY-2564) No secure listeners defined.

Frank Cornelis (JIRA) jira-events at lists.jboss.org
Sun Nov 24 23:27:05 EST 2013


Frank Cornelis created WFLY-2564:
------------------------------------

             Summary: No secure listeners defined.
                 Key: WFLY-2564
                 URL: https://issues.jboss.org/browse/WFLY-2564
             Project: WildFly
          Issue Type: Bug
      Security Level: Public (Everyone can see)
          Components: Web (Undertow)
    Affects Versions: 8.0.0.CR1
         Environment: Apache Httpd front-end with SSL termination + AJP connector
            Reporter: Frank Cornelis
            Assignee: Stuart Douglas


Normally the following in web.xml

    <security-constraint>  
            <web-resource-collection>  
                <web-resource-name>webapp</web-resource-name>  
                <url-pattern>/*</url-pattern>  
            </web-resource-collection>  
            <user-data-constraint>  
                <transport-guarantee>CONFIDENTIAL</transport-guarantee>  
            </user-data-constraint>  
    </security-constraint>  

would make your web application to redirect from http to https. This is the case of JBoss EAP 6.1. Just tried out WIldFly. Undertow gives me the following instead (via AJP listener):

    07:57:57,233 ERROR [io.undertow.request] (default task-6) UT005023: Exception handling request to /dss/index.jsf: java.lang.IllegalStateException: No secure listeners defined.  
        at org.wildfly.extension.undertow.ServletContainerService.lookupSecurePort(ServletContainerService.java:107)  

Directly navigating to the web application over SSL does work.

Tomaz Cerar:
This is a bug.

it tries to find ajp connector with ssl enabled which is useless for AJP as SSL can be end pointed on apache.

It needs this info to know to what port to redirect to, as ssl can be on any port.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira


More information about the jboss-jira mailing list