Forum Discussion

cdivilly_115352's avatar
cdivilly_115352
Icon for Nimbostratus rankNimbostratus
Feb 27, 2013

WebLogic and SSL

Hi,

 

apologies in advance if this question has already been covered, new to BIGIP, I'm a developer not a network admin, so this all new to me. I have an application deployed on Oracle WebLogic (WLS), front-ended with Oracle HTTP Server (OHS). Some URLs of the application must only be accessed over HTTPS. The application will error if the URLs are accessed over HTTP.

 

This application has now been deployed in a BIGIP environment where HTTPS terminates at BIGIP, and the requests are then forwarded on as plain HTTP to OHS/WLS. Naturally the application errors when the HTTPS only URLs are accessed because as far as OHS/WLS are concerned the request was made over HTTP.

 

Is there a way to configure OHS or WLS to treat the request as received over HTTPS (the only external access is via the HTTPS BIGIP gateway)?

 

I've been told there's a header (don't know it's name) added by BIGIP to the forwarded request to indicate that it originated on HTTPS, but I can't modify the application (to check for this header) , and I'm not familiar with any techniques to make OHS or WLS recognise this header and rewrite the request to make it appear as if it is a HTTPS request.

 

 

Any pointers greatly appreciated.

 

 

APM
app sec
security

1 Reply

Sort By
  • What_Lies_Bene1's avatar
    What_Lies_Bene1
    Icon for Cirrostratus rankCirrostratus
    Feb 28, 2013
    Probably the easiest solution here is to assign a ServerSSL profile to the Virtual Server and create an iRule to disable it for all URLs except the ones that need to be sent encrypted. However, there could be issues with this and I suspect OneConnect will need to be configured to ensure load balancing is performed per request.