[jboss-jira] [JBoss JIRA] (WFLY-6538) https-listener does not support proxy-address-forwarding

Tomaz Cerar (JIRA) issues at jboss.org
Tue Apr 19 11:17:00 EDT 2016


    [ https://issues.jboss.org/browse/WFLY-6538?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13193881#comment-13193881 ] 

Tomaz Cerar commented on WFLY-6538:
-----------------------------------

[~swd847] Wdyt? would SSLHeaderHandler mess with existing SSL connection already at play? Or is it safe to use it also with https listener

> https-listener does not support proxy-address-forwarding
> --------------------------------------------------------
>
>                 Key: WFLY-6538
>                 URL: https://issues.jboss.org/browse/WFLY-6538
>             Project: WildFly
>          Issue Type: Feature Request
>          Components: Web (Undertow)
>    Affects Versions: 9.0.2.Final, 10.0.0.Final
>            Reporter: Emond Papegaaij
>            Assignee: Tomaz Cerar
>
> HttpsListenerService explicitly passes false to its superclass for proxyAddressForwarding and certificateForwarding, making it impossible to enable these features. For a security-sensitive application, we need a secure connection from our proxy to WildFly and we need WildFly to respect the headers sent by our proxy. It seems easy to support these options by reading them in HttpsListenerAdd and passing them to HttpsListenerService, which can simply pass them to the super constructor.



--
This message was sent by Atlassian JIRA
(v6.4.11#64026)


More information about the jboss-jira mailing list