Skip to main content

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index] [List Home]
Re: [jetty-users] Filters not working for SSL requests through jetty Proxyserver

Hi,

On Wed, Jul 31, 2013 at 8:43 AM, Shiv Kumbhar <shivshankar.k@xxxxxxxxx> wrote:
> Hi All,
>
> I have setup a Web ProxyServer referring to
> http://download.eclipse.org/jetty/stable-7/xref/org/eclipse/jetty/embedded/ProxyServer.html.
>
> I have added a Servlet Filter to read response headers (code shown below).
>
> This filter gets executed for HTTP requests but not for HTTPS ones.Is this
> expected behavior?

Yes.

> Is there a way to read request / response headers for HTTPS using jetty
> proxy server ? LMK.

There is no way to read requests/responses in any proxy that tunnels,
it's not related to Jetty.

> Highly appreciate your inputs.

When you have a proxy and perform an HTTPS request, the client
establish an encrypted tunnel via the proxy to the target server.
The proxy just acts as an opaque byte transferrer and as such it
cannot even know if what the client is sending is actually encrypted
HTTP (could be another protocol like WebSocket), it cannot decrypt it,
and therefore cannot invoke servlet filters.

-- 
Simone Bordet
----
http://cometd.org
http://webtide.com
http://intalio.com
Developer advice, training, services and support
from the Jetty & CometD experts.
Intalio, the modern way to build business applications.


Back to the top