Skip to content

Instantly share code, notes, and snippets.

@jtgasper3
Created April 11, 2014 21:01
Show Gist options
  • Star 7 You must be signed in to star a gist
  • Fork 4 You must be signed in to fork a gist
  • Save jtgasper3/10501274 to your computer and use it in GitHub Desktop.
Save jtgasper3/10501274 to your computer and use it in GitHub Desktop.
Force Tomcat to redirect all HTTP traffic to HTTPS.
<!--
To force Tomcat to redirect and revert all requested HTTP traffic over to HTTPS, configure the `conf/web.xml` file with the below block.
This should be placed at the very end of the file near and above the ending `</webapp>` tag:
-->
<security-constraint>
<web-resource-collection>
<web-resource-name>Automatic Forward to HTTPS/SSL
</web-resource-name>
<url-pattern>/*</url-pattern>
</web-resource-collection>
<user-data-constraint>
<transport-guarantee>CONFIDENTIAL</transport-guarantee>
</user-data-constraint>
</security-constraint>
@fakhriyusifli
Copy link

Thank you very much. it solved my problem that i have been looking for weeks :D

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment