Tomcat Http和Https在同一个端口上

Question

I have a web-service endpoint and a http connector on port X. At some point this endpoint needs to switch to https, but on the same port! (I know this is not the normal way of doing things, but this is what my clients expect from an old server they are using...)

Is there a way to do it in tomcat?

Answer 1

This is not possible with Tomcat.The HTTPS connector will accept SSL connection only.

We have such a proxy developed in house. It's not that hard to do. You just need to check the first incoming packet. Looking for the pattern of SSL handshake. We only look for CLIENT_HELLO. Once you figure out the protocol, you can forward the request accordingly.

This is really ugly. You shouldn't do it if all possible. We have to do it because the legacy clients do this and it's impossible to upgrade them all.

Answer 2

There is such a thing as HTTPS upgrade, whereby a plaintext HTTP connection is upgraded to HTTP by mutual agreement after it has been formed. Is that what you mean? If so, Tomcat doesn't seem to support it out of the box, and neither does Java out of the box either. You can probably write yourself a Tomcat Connector that will do it; on the client end you have a more interesting problem ;-)

But I would ask why? Ports aren't so expensive that you can't use two.

Answer 3

您不需要在同一端口上运行HTTP和HTTPS，配置Tomcat以将请求重定向到server.xml文件中的HTTPS。

Answer 4

well I wonder why they are NOT usually on the same port! wouldn't that be easier?

the reason is probably that related Java APIS (javax.net.ssl) don't allow that; you must have different server sockets. are there any alternative SSL impls for Java? I'm not aware of any.