Apache Reverse Proxy to Orbeon (HTTPS to HTTP)

classic Classic list List threaded Threaded
5 messages Options
Reply | Threaded
Open this post in threaded view
|

Apache Reverse Proxy to Orbeon (HTTPS to HTTP)

Hoi Chong
Hi,
I have a setup with Apache as the Reverse Proxy to Orbeon (Tomcat).

Apache is receiving request using HTTPS and reverse proxy to Orbeon
using HTTP.

A user (browser) will access Apache using this URL.

https://demosrv/orbeon/example-form/login

the reverse proxy will access Orbeon via
http://demosrv/orbeon/example-form/login

In the Login form, after the user input UserId, Passwd, and a submit,
I have an XPL that access the DB to verify authentication and add some
user details into session,
using the scope serializer.

    <p:processor name="oxf:scope-serializer">
        <p:input name="config">
            <config>
                <key>requserdata</key>
                <scope>session</scope>
                <session-scope>application</session-scope>
            </config>
        </p:input>
        <p:input name="data" href="#userdata"/>
    </p:processor>


At this stage, Orbeon log will have this error...

2009-11-24 22:04:20,442 INFO  ProcessorService  - /uis-welcome/login/ -
Received request
2009-11-24 22:04:21,370 ERROR XFormsServer  - xforms-submit-error -
setting throwable {throwable:
"org.apache.commons.httpclient.ProtocolException: The server demosrv
failed to respond with a valid HTTP response
    at
org.apache.commons.httpclient.HttpMethodBase.readStatusLine(HttpMethodBase.java:1987)
    at
org.apache.commons.httpclient.HttpMethodBase.readResponse(HttpMethodBase.java:1735)
    at
org.apache.commons.httpclient.HttpMethodBase.execute(HttpMethodBase.java:1098)
    at
org.apache.commons.httpclient.HttpMethodDirector.executeWithRetry(HttpMethodDirector.java:398)
    at
org.apache.commons.httpclient.HttpMethodDirector.executeMethod(HttpMethodDirector.java:171)
    at
org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397)
    at
org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:323)
    at
org.orbeon.oxf.resources.handler.HTTPURLConnection.connect(HTTPURLConnection.java:196)
    at org.orbeon.oxf.util.Connection.connect(Connection.java:476)
    at org.orbeon.oxf.util.Connection.open(Connection.java:93)
    at
org.orbeon.oxf.xforms.submission.RegularSubmission$1.call(RegularSubmission.java:96)
    at
org.orbeon.oxf.xforms.submission.RegularSubmission$1.call(RegularSubmission.java:80)

And checking the Tomcat log (i enabled tomcat logging), there is this
error ...

 DEBUG http-9080-1 org.apache.commons.httpclient.HttpConnection - enter
HttpConnection.readLine()
 DEBUG http-9080-1 org.apache.commons.httpclient.HttpParser - enter
HttpParser.readLine(InputStream, String)
 DEBUG http-9080-1 org.apache.commons.httpclient.HttpParser - enter
HttpParser.readRawLine()
 DEBUG http-9080-1 httpclient.wire.header - << "Reason: You're speaking
plain HTTP to an SSL-enabled server port.<br />[\n]"
 DEBUG http-9080-1 httpclient.wire.header - << "Reason: You're speaking
plain HTTP to an SSL-enabled server port.<br />[\r][\n]"
 DEBUG http-9080-1 org.apache.commons.httpclient.HttpConnection - enter
HttpConnection.readLine()
 DEBUG http-9080-1 org.apache.commons.httpclient.HttpParser - enter
HttpParser.readLine(InputStream, String)
 DEBUG http-9080-1 org.apache.commons.httpclient.HttpParser - enter
HttpParser.readRawLine()
 DEBUG http-9080-1 httpclient.wire.header - << "Instead use the HTTPS
scheme to access this URL, please.<br />[\n]"
 DEBUG http-9080-1 httpclient.wire.header - << "Instead use the HTTPS
scheme to access this URL, please.<br />[\r][\n]"


It seems that Orbeon is communicating back with itself, server side
submission, via HTTP and not HTTPS.
Even though the User (browser) is using HTTPS to access the Reverse Proxy.

My questions are:
Can the above setup work, or do I need to have Apache RP to Orbeon using
HTTPS as well?

Any configuration to set the Orbeon httpclient to use HTTPS?

Thanks for any help.

Regards.
Hoi Chong



--
You receive this message as a subscriber of the [hidden email] mailing list.
To unsubscribe: mailto:[hidden email]
For general help: mailto:[hidden email]?subject=help
OW2 mailing lists service home page: http://www.ow2.org/wws
Reply | Threaded
Open this post in threaded view
|

Clean view of application

Steven Kerr
People

This might be obvious, but nevertheless I can't seem to find it.  How
can I make my application run fullscreen?  I can't seem to get rid of
the "Orbeon Forms Apps" menu, "run application", "View source Code",
etc.  I only want to see my application on the screen.

Cheers

Steve



--
You receive this message as a subscriber of the [hidden email] mailing list.
To unsubscribe: mailto:[hidden email]
For general help: mailto:[hidden email]?subject=help
OW2 mailing lists service home page: http://www.ow2.org/wws
Reply | Threaded
Open this post in threaded view
|

Re: Clean view of application

Einar Moos
Steve,

edit your xsl stylesheet in config/theme-examples.xsl (or your own stylesheet) which you can declare in config/properties-base.xml ex (line 40):

    <property as="xs:anyURI"  name="oxf.epilogue.theme"                              value="oxf:/config/YOUR-THEME.xsl"/>

HTH

-- einar

On Wed, Nov 25, 2009 at 4:51 AM, Steven Kerr <[hidden email]> wrote:
People

This might be obvious, but nevertheless I can't seem to find it.  How
can I make my application run fullscreen?  I can't seem to get rid of
the "Orbeon Forms Apps" menu, "run application", "View source Code",
etc.  I only want to see my application on the screen.

Cheers

Steve



--
You receive this message as a subscriber of the [hidden email] mailing list.
To unsubscribe: mailto:[hidden email]
For general help: mailto:[hidden email]?subject=help
OW2 mailing lists service home page: http://www.ow2.org/wws




--
You receive this message as a subscriber of the [hidden email] mailing list.
To unsubscribe: mailto:[hidden email]
For general help: mailto:[hidden email]?subject=help
OW2 mailing lists service home page: http://www.ow2.org/wws
Reply | Threaded
Open this post in threaded view
|

Re: Re: Clean view of application

Baschir Jaghoori
For a start you could use theme-plain.xsl

btw, you can override parameters by placing a properties-local.xml into
WEB-INF\resources\config

Cheers,
Baschir

Einar Moos schrieb:

> Steve,
>
> edit your xsl stylesheet in config/theme-examples.xsl (or your own
> stylesheet) which you can declare in config/properties-base.xml ex (line
> 40):
>
>     <property as="xs:anyURI"  
> name="oxf.epilogue.theme"                              
> value="oxf:/config/YOUR-THEME.xsl"/>
>
> HTH
>
> -- einar
>
> On Wed, Nov 25, 2009 at 4:51 AM, Steven Kerr
> <[hidden email] <mailto:[hidden email]>>
> wrote:
>
>     People
>
>     This might be obvious, but nevertheless I can't seem to find it.  How
>     can I make my application run fullscreen?  I can't seem to get rid of
>     the "Orbeon Forms Apps" menu, "run application", "View source Code",
>     etc.  I only want to see my application on the screen.
>
>     Cheers
>
>     Steve
>
>
>
>     --
>     You receive this message as a subscriber of the [hidden email]
>     <mailto:[hidden email]> mailing list.
>     To unsubscribe: mailto:[hidden email]
>     <mailto:[hidden email]>
>     For general help: mailto:[hidden email]
>     <mailto:[hidden email]>?subject=help
>     OW2 mailing lists service home page: http://www.ow2.org/wws
>
>


--
You receive this message as a subscriber of the [hidden email] mailing list.
To unsubscribe: mailto:[hidden email]
For general help: mailto:[hidden email]?subject=help
OW2 mailing lists service home page: http://www.ow2.org/wws
Reply | Threaded
Open this post in threaded view
|

Re: Apache Reverse Proxy to Orbeon (HTTPS to HTTP)

Erik Bruchez-3
In reply to this post by Hoi Chong
Hoi,

It should work with recent builds, since our web site at
http://www.orbeon.com/orbeon/ also uses Apache as a reverse proxy to
Tomcat.

We use Apache 2.2 and proxy with mod_proxy's ajp:// protocol support.

On the Orbeon side, we set this property:

<property as="xs:anyURI"  name="oxf.url-rewriting.service.base-uri"
value="http://localhost:8080/orbeon"/>

so that service URLs are rewritten properly.

-Erik

On Tue, Nov 24, 2009 at 10:12 AM, Hoi Chong <[hidden email]> wrote:

> Hi,
> I have a setup with Apache as the Reverse Proxy to Orbeon (Tomcat).
>
> Apache is receiving request using HTTPS and reverse proxy to Orbeon using
> HTTP.
>
> A user (browser) will access Apache using this URL.
>
> https://demosrv/orbeon/example-form/login
>
> the reverse proxy will access Orbeon via
> http://demosrv/orbeon/example-form/login
>
> In the Login form, after the user input UserId, Passwd, and a submit,
> I have an XPL that access the DB to verify authentication and add some user
> details into session,
> using the scope serializer.
>
>   <p:processor name="oxf:scope-serializer">
>       <p:input name="config">
>           <config>
>               <key>requserdata</key>
>               <scope>session</scope>
>               <session-scope>application</session-scope>
>           </config>
>       </p:input>
>       <p:input name="data" href="#userdata"/>
>   </p:processor>
>
>
> At this stage, Orbeon log will have this error...
>
> 2009-11-24 22:04:20,442 INFO  ProcessorService  - /uis-welcome/login/ -
> Received request
> 2009-11-24 22:04:21,370 ERROR XFormsServer  - xforms-submit-error - setting
> throwable {throwable: "org.apache.commons.httpclient.ProtocolException: The
> server demosrv failed to respond with a valid HTTP response
>   at
> org.apache.commons.httpclient.HttpMethodBase.readStatusLine(HttpMethodBase.java:1987)
>   at
> org.apache.commons.httpclient.HttpMethodBase.readResponse(HttpMethodBase.java:1735)
>   at
> org.apache.commons.httpclient.HttpMethodBase.execute(HttpMethodBase.java:1098)
>   at
> org.apache.commons.httpclient.HttpMethodDirector.executeWithRetry(HttpMethodDirector.java:398)
>   at
> org.apache.commons.httpclient.HttpMethodDirector.executeMethod(HttpMethodDirector.java:171)
>   at
> org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397)
>   at
> org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:323)
>   at
> org.orbeon.oxf.resources.handler.HTTPURLConnection.connect(HTTPURLConnection.java:196)
>   at org.orbeon.oxf.util.Connection.connect(Connection.java:476)
>   at org.orbeon.oxf.util.Connection.open(Connection.java:93)
>   at
> org.orbeon.oxf.xforms.submission.RegularSubmission$1.call(RegularSubmission.java:96)
>   at
> org.orbeon.oxf.xforms.submission.RegularSubmission$1.call(RegularSubmission.java:80)
>
> And checking the Tomcat log (i enabled tomcat logging), there is this error
> ...
>
> DEBUG http-9080-1 org.apache.commons.httpclient.HttpConnection - enter
> HttpConnection.readLine()
> DEBUG http-9080-1 org.apache.commons.httpclient.HttpParser - enter
> HttpParser.readLine(InputStream, String)
> DEBUG http-9080-1 org.apache.commons.httpclient.HttpParser - enter
> HttpParser.readRawLine()
> DEBUG http-9080-1 httpclient.wire.header - << "Reason: You're speaking plain
> HTTP to an SSL-enabled server port.<br />[\n]"
> DEBUG http-9080-1 httpclient.wire.header - << "Reason: You're speaking plain
> HTTP to an SSL-enabled server port.<br />[\r][\n]"
> DEBUG http-9080-1 org.apache.commons.httpclient.HttpConnection - enter
> HttpConnection.readLine()
> DEBUG http-9080-1 org.apache.commons.httpclient.HttpParser - enter
> HttpParser.readLine(InputStream, String)
> DEBUG http-9080-1 org.apache.commons.httpclient.HttpParser - enter
> HttpParser.readRawLine()
> DEBUG http-9080-1 httpclient.wire.header - << "Instead use the HTTPS scheme
> to access this URL, please.<br />[\n]"
> DEBUG http-9080-1 httpclient.wire.header - << "Instead use the HTTPS scheme
> to access this URL, please.<br />[\r][\n]"
>
>
> It seems that Orbeon is communicating back with itself, server side
> submission, via HTTP and not HTTPS.
> Even though the User (browser) is using HTTPS to access the Reverse Proxy.
>
> My questions are:
> Can the above setup work, or do I need to have Apache RP to Orbeon using
> HTTPS as well?
>
> Any configuration to set the Orbeon httpclient to use HTTPS?
>
> Thanks for any help.
>
> Regards.
> Hoi Chong
>
>
>
> --
> You receive this message as a subscriber of the [hidden email] mailing
> list.
> To unsubscribe: mailto:[hidden email]
> For general help: mailto:[hidden email]?subject=help
> OW2 mailing lists service home page: http://www.ow2.org/wws
>
>


--
You receive this message as a subscriber of the [hidden email] mailing list.
To unsubscribe: mailto:[hidden email]
For general help: mailto:[hidden email]?subject=help
OW2 mailing lists service home page: http://www.ow2.org/wws