HttpServletRequest.getRequestURL() returns 'http:' for https requests?

[Simon Brooke]

I've got a weird bug which I'm trying to characterise. Essentially I'm
calling HttpServletRequest.getRequestURL(). On my development machines
this works fine, but on one of my customer's production machines it
returns 'http://whatever' even when the request was an https
request. I'm not certain what JVM my customer is using or which
version of Tomcat (I've asked and hopefully will know soon).

Has anyone else seen this behaviour and if so what was the resolution?

 

[Sudsy]

I've got a weird bug which I'm trying to characterise. Essentially I'm
calling HttpServletRequest.getRequestURL(). On my development machines
this works fine, but on one of my customer's production machines it
returns 'http://whatever' even when the request was an https
request. I'm not certain what JVM my customer is using or which
version of Tomcat (I've asked and hopefully will know soon).

Has anyone else seen this behaviour and if so what was the resolution?

I've seen this and it was because I didn't have a security provider
loaded which was SSL-aware. Check out the security.provider lines in
the $JAVA_HOME/jre/lib/security/java.security file.

If memory serves, this could be an older Java installation (<=1.3?)

and you'll need to locate and load JSSE.

 

[Simon Brooke]

I've seen this and it was because I didn't have a security provider
loaded which was SSL-aware. Check out the security.provider lines in
the $JAVA_HOME/jre/lib/security/java.security file.

If memory serves, this could be an older Java installation (<=1.3?)

and you'll need to locate and load JSSE.

Thanks, that jogs my memory: we _have_ seen this before and that was
the right solution then. Interestingly I've since found that my
customer is running Blackdown 1.4 - I thought 1.4 had JSSE in
automatically, but perhaps the Blackdown doesn't.