rbjTech Software Development Journal

Oracle Fusion Middleware – force https

After hours of research and many failed attempts of making changes to the spring settings, thinking the port redirection issue recently experienced when deploying a Flex based Java Spring app was app related, we found a simple 4 lines of code that ultimately fixed the issue.

Recap the issue was:  Within a Flex based web application the user logged in via a https page via standard port 443. Upon logging in the spring secuirty redirection request sent the response to a http standard port 80 port.  Using Oracle Fusion Middleware with Weblogic serving up the java container the https request is served up and handled by Fusion Middleware OHS - similiar to the Apache / Tomcat relationship.

To the point: Given the app was being redirected to the Weblogic side of the suite upon logging in the session was dying since the port was effectively changing.  So the fix needed a way to force the application to stay on https and standard port 443.

The solution:  Insert a permanent redirect into the httpd.conf file of the Fusion Middleware App Server.  The Http conf as follows:

NameVirtualHost *:80

Listen 80

<VirtualHost *:80>

ServerName http://server-name

Redirect permanent /contextRoot https://server-name/contextRoot

</VirtualHost>

 

NameVirtualHost *:443

Listen 443

<VirtualHost *:443>

ServerName  https://server-name:443/

<IfModule weblogic_module>

WebLogicHost server-name

<Location /contextRoot>

SetHandler weblogic-handler

WLLogFile /opt/oracle/logs/log_proxy_6666.log

Debug ALL

WebLogicHost server-name

WebLogicPort 8001

</Location>

DynamicServerList Off

WebLogicPort 8001

</IfModule>

<IfModule ossl_module>

SSLEngine on

SSLProtocol nzos_Version_1_0 nzos_Version_3_0_With_2_0_Hello nzos_Version_3_0

SSLCipherSuite SSL_RSA_WITH_RC4_128_MD5,SSL_RSA_WITH_RC4_128_SHA,SSL_RSA_WITH_3DES_EDE_CBC_SHA,SSL_RSA_WITH_DES_CBC_SHA,TLS_RSA_WITH_AES_128_CBC_SHA,TLS_RSA_WITH_AES_256_CBC_SHA

SSLVerifyClient none

SSLWallet  "${ORACLE_INSTANCE}/config/${COMPONENT_TYPE}/${COMPONENT_NAME}/keystores/rrsRob5"

SSLCRLCheck Off

</IfModule>

</VirtualHost>