Access the liferay portal via https layer in apache server

[pandiyan arumugam, modifié il y a 8 années.]

Hi All,

I have two environment such as apache server and webserver . While accessing the apache server it's redirecting to my actual server via http protocol working fine but same thing not working in https protocol.

Proxy configurations:

ProxyRequests On
ProxyPreserveHost On
<Proxy *>
Order deny,allow
Allow from all
</Proxy>

ProxyPass / http://localhost:8080/

Could you please help me why it's not working in https layer.

[Patrick Wolf, modifié il y a 8 années.]

Apache server is a web server, or more precisely a HTTP server. Can you please spell out what you mean? Do you have two Apache HTTP servers or one Apache HTTP server and a legacy HTTP server such as IIS, or two Apache HTTP servers?
As far as I know, if you get two HTTP servers, whatever they are, and you want that both of them share the same SSL certificate, in the use case of load balancing for instance, you can either share the same private key to each one of the servers with the security breach that this implies, or use an SSL proxy that holds the private key. You may ask for some more details to your CA (Certificate Authority) which usually limits usage of certificates and can revoke them. This depends on the type of certificate you buy. Some more details.

[Arun Das, modifié il y a 8 années.]

Hi,
Try setting web.server.http.port=80 and web.server.https.port=443 in portal-ext.properties and restart Liferay.
I'm not sure about your web server configuration. Refer http://docs.liferay.com/portal/6.2/propertiesdoc/portal.properties.html#Web Server

Arun

[Olaf Kock, modifié il y a 8 années.]

pandiyan arumugam:

I have two environment such as apache server and webserver . While accessing the apache server it's redirecting to my actual server via http protocol working fine but same thing not working in https protocol.

What exactly is not working?

• Does Apache serve https but not forward to tomcat?
• Does Apache not serve https?
• Does Tomcat/Liferay not recognize that the original request has been made through https? E.g. are links that Liferay generates using http instead of https?
• Do you want to establish an encrypted connection between Apache and Tomcat?

[Krzysztof Gołębiowski, modifié il y a 8 années.]

Hi pandiyan,
I guess the problem is that ProxyPreserveHost works better when you use AJP protocol. You are using standard HTTP proxy ProxyPass / http://localhost:8080/. Try switching to ajp instead and it should work fine - Liferay will automatically generate links appropriate to the protocol you use when visiting the site, HTTP or HTTPS.

Regards,
KG

[Olaf Kock, modifié il y a 8 années.]

Krzysztof Gołębiowski:

I guess the problem is that ProxyPreserveHost works better when you use AJP protocol.

Well, actually ProxyPreserveHost works well with http - the thing is just that you need to set it, otherwise the host name will be swallowed. However, if you use AJP, this and all the other aspects of the original request (e.g. the fact that it's coming in through https) will be preserved.