<font face="Default Sans Serif,Verdana,Arial,Helvetica,sans-serif" size="2"><div>Hi Jan,</div><div><br></div><div>thank you for the advice, i hoped that we would not have to set up second (HTTP) connector (we use AJP).</div><div><br>S pozdravem / Kind regards<br><br>Filip Kratochvil<br>IBA CZ, s.r.o.<br></div><br><br><font color="#990099">-----opencms-dev-bounces@opencms.org wrote: -----</font><div class="iNotesHistory" style="padding-left:5px;"><div style="padding-right:0px;padding-left:5px;border-left:solid black 2px;">To: The OpenCms mailing list <opencms-dev@opencms.org><br>From: Knezik Jan <jan.knezik@vsb.cz><br>Sent by: opencms-dev-bounces@opencms.org<br>Date: 04/10/2018 08:32AM<br>Subject: Re: [opencms-dev] SSL proxy and problem with internal links<br><br>
<!--Notes ACF
<meta http-equiv="Content-Type" content="text/html; charset=utf8">-->
<p>Hi Filip,<br>
</p>
<p>we have experienced the same problem and we have already solved it. You have to do following steps (working with OpenCMS 10.5.<span style="font-size: 12pt;">3</span><span style="font-size: 12pt;">):</span></p>
<p><span style="font-size: 12pt;"></span></p>
<p><br>
</p>
<p>* update Tomcat configuration settings - add proxyPort="443" scheme="https". <span style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 16px; background-color: rgb(255, 255, 255);">Here is an example (we are running Tomcat physically on
port 9443</span><span style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 16px; background-color: rgb(255, 255, 255);">)</span><span style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 16px; background-color: rgb(255, 255, 255);">:</span>
</p>
<p><br>
</p>
<p><Connector port="9443" protocol="HTTP/1.1" connectionTimeout="20000" redirectPort="8443" URIEncodings="UTF-8" proxyPort="443" scheme="https"><br>
</p>
<p><br>
</p>
<p>* set property workplace-server to https value and secure server property for particular domains in opencms-system.xml file:<br>
</p>
<p><br>
</p>
<p style="margin-left: 0px; margin-right: 0px;"><!--StartFragment--><sites><br>
</p>
<p style="margin-left: 0px; margin-right: 0px;"><workplace-server>https://editor.mydomain.cz</workplace-server><!--EndFragment--><br>
</p>
<p style="margin-left: 0px; margin-right: 0px;"><!--StartFragment--> <site server="http://mysite.mydomain.cz" uri="/sites/mysite/" title="MySite" position="5.0" webserver="true"><!--EndFragment--><br>
</p>
<p><span style="font-size: 12pt;"> <</span><span style="font-size: 12pt;">secure server="<span style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 16px; white-space: pre-wrap; background-color: rgb(255, 255, 255);">https://</span><span style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 16px; white-space: pre-wrap; background-color: rgb(255, 255, 255);">mysite</span><span style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 16px; white-space: pre-wrap; background-color: rgb(255, 255, 255);">.mydomain</span><span style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 16px; white-space: pre-wrap; background-color: rgb(255, 255, 255);">.cz</span>"
exclus</span><span style="font-size: 12pt;">ive="false" error="false"/></span><br>
</p>
<p> </site><br>
</p>
<p></sites><br>
</p>
<p><br>
</p>
<p>Best regards,<br>
</p>
<p>Jan Knezik<br>
</p>
<p><br>
</p>
<div style=""><font color="#212121">
<hr tabindex="-1" style="display:inline-block; width:98%">
<div id="divRplyFwdMsg" dir="ltr"><font face="Calibri, sans-serif" color="#000000" style="font-size:11pt"><b>Od:</b> opencms-dev-bounces@opencms.org <opencms-dev-bounces@opencms.org> za uživatele Filip.Kratochvil@ibacz.eu <Filip.Kratochvil@ibacz.eu><br>
<b>Odesláno:</b> 9. dubna 2018 13:37<br>
<b>Komu:</b> The OpenCms mailing list<br>
<b>Předmět:</b> [opencms-dev] SSL proxy and problem with internal links</font>
<div> </div>
</div>
<div><font face="Default Sans Serif,Verdana,Arial,Helvetica,sans-serif" size="2">
<div>Hi guys,</div>
<div><br>
</div>
<div>we have a problem with internal links in a following system configuration:</div>
<div><br>
</div>
<div>One of our customer uses loadbalancer (proxy) in front of Apache. This server terminates all SSL requests, so all requests to the OpenCms are NON-SSL (there is no SSL configuration in Apache/Tomcat/OpenCms configuration files).</div>
<div><br>
</div>
<div>But it seems to be a problem for OpenCms workplace. I<span style="font-size:12.8px">f you configure wokplace server with NON-SSL http protocol (e. g. http://admin.example.com/) it looks OK at the first sight, but when editor adds some interneal links,
they are resolved as external links. It looks like OpenCms makes comparsion between "workplace configuration" and "editor's context" a there is a difference in http (configuration) and https (context) protocol. But it's not possible to configure OpenCms with
SSL https protocol, because requests to the OpenCms are NON-SSL in reality. When we tried it we weren't able to access workplace.</span></div>
<div><br>
</div>
<div>Maybe OpenCms shouldn't be so strict and compare only workplace domain (except http/s protocol).</div>
<div><br>
</div>
<div>Have someone same problem and did you solve it?</div>
<div><br>
</div>
<div>Thank you in advance.<br>
<br>
S pozdravem / Kind regards<br>
<br>
Filip Kratochvil<br>
IBA CZ, s.r.o.<br>
</div>
<div><br>
<hr>
Disclaimer:<br>
<br>
The information contained in this communication is intended solely for the use of the individual or entity to whom it is addressed and others authorized to receive it.<br>
It may contain confidential or legally privileged information.<br>
If you are not the intended recipient you are hereby notified that any disclosure, copying, distribution or taking any action in reliance on the contents of this information is strictly prohibited and may be unlawful.<br>
If you have received this communication in error, please notify us immediately by forwarding this email to ict@ibacz.eu and then delete it from your system.<br>
IBA Group is neither liable for the proper and complete transmission of the information contained in this communication nor for any delay in its receipt.<br>
</div>
</font></div>
</font></div>
<div><font face="Courier New,Courier,monospace" size="3">_______________________________________________<br>This mail is sent to you from the opencms-dev mailing list<br>To change your list options, or to unsubscribe from the list, please visit<br><a href="http://lists.opencms.org/cgi-bin/mailman/listinfo/opencms-dev">http://lists.opencms.org/cgi-bin/mailman/listinfo/opencms-dev</a><br><br><br><br></font></div></jan.knezik@vsb.cz></div></div><div><br><hr>Disclaimer:<br><br>The information contained in this communication is intended solely for the use of the individual or entity to whom it is addressed and others authorized to receive it.<br>It may contain confidential or legally privileged information.<br>If you are not the intended recipient you are hereby notified that any disclosure, copying, distribution or taking any action in reliance on the contents of this information is strictly prohibited and may be unlawful.<br>If you have received this communication in error, please notify us immediately by forwarding this email to ict@ibacz.eu and then delete it from your system.<br>IBA Group is neither liable for the proper and complete transmission of the information contained in this communication nor for any delay in its receipt.<br> </div></font>