[keycloak-user] Keycloak 1.9.0 CR1 not serving javascript in https when fronted with Apache2 and mod_proxy_ajp

[Michael Mok]

Hi


Not sure if I missed any thing here. But I am getting the following error
when fronting keycloak 1.9.0 CR1 with Apache http server. I am running
keycloak 1.9.0 CR1 with Wildfly 10. it is a bug or something I missed in my
configuration. My setup is browser -> https -> Apache2 -> ajp -> keycloak
1.9.CR1.

The setup and files are taken from keycloak-1.9.0.CR1.tar.gz with no
modification apart from adding the ajp listener on start port 8009.

Any idea? Thanks.

but requested an insecure script '
http://demo.test.com/auth/resources/1.9.0.cr1/admin/keycloak/js/controllers/realm.js'.
This request has been blocked; the content must be served over HTTPS.
demo.test.com/:1 Mixed Content: The page at '
https://demo.test.com/auth/admin/master/console/' was loaded over HTTPS,
but requested an insecure script '
http://demo.test.com/auth/resources/1.9.0.cr1/admin/keycloak/js/controllers/clients.js'.
This request has been blocked; the content must be served over HTTPS.
demo.test.com/:1 Mixed Content: The page at '
https://demo.test.com/auth/admin/master/console/' was loaded over HTTPS,
but requested an insecure script '
http://demo.test.com/auth/resources/1.9.0.cr1/admin/keycloak/js/controllers/users.js'.
This request has been blocked; the content must be served over HTTPS.
demo.test.com/:1 Mixed Content: The page at '
https://demo.test.com/auth/admin/master/console/' was loaded over HTTPS,
but requested an insecure script '
http://demo.test.com/auth/resources/1.9.0.cr1/admin/keycloak/js/controllers/groups.js'.
This request has been blocked; the content must be served over HTTPS.
demo.test.com/:1 Mixed Content: The page at '
https://demo.test.com/auth/admin/master/console/' was loaded over HTTPS,
but requested an insecure script '
http://demo.test.com/auth/resources/1.9.0.cr1/admin/keycloak/js/loaders.js'.
This request has been blocked; the content must be served over HTTPS.
demo.test.com/:1 Mixed Content: The page at '
https://demo.test.com/auth/admin/master/console/' was loaded over HTTPS,
but requested an insecure script '
http://demo.test.com/auth/resources/1.9.0.cr1/admin/keycloak/js/services.js'.
This request has been blocked; the content must be served over HTTPS.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.jboss.org/pipermail/keycloak-user/attachments/20160223/422edf43/attachment.html