[Geoserver-users] Apache + Jetty + HTTPS

Dear all,

I am running GeoServer (standalone) on Debian. The port 8080 is forwarded to port 80 using Apache HTTP server( with the ProxyPass setting). This worked fine until we switched the server to HTTPS. The GeoServer is still serving data and the Admin UI can still be accessed, however most functions do not work and give the error:

 HTTP ERROR 400
 Problem accessing /geoserver/web/wicket /bookmarkablerg\.geoserver\.web\.data\.resource\.ResourceConfigurationPage\. Reason:
     Origin does not correspond to request

Is there any recommendation how to setup a (standalone) GeoServer for HTTPS in combination with Apache HTTP?

Thanks and best wishes,
Jakob

PS: Sorry if my question is too unspecific. I have a Geography background and I am rather new to system administration. So, I am also happy about any hints for resources where I can learn the basics of this topic.

Usually this kind of problem is related to csrf

check
https://docs.geoserver.org/latest/en/user/security/webadmin/csrf.html

and this
https://osgeo-org.atlassian.net/browse/GEOS-9353?inbox=true&=

Jakob Miksch <info@anonymised.com> escreveu no dia segunda, 25/05/2020 à(s) 12:17:

···

www.vfonsecaz.pt

Thanks Vitor!
This fixed it :slight_smile:

···

On 25.05.20 13:33, Vitor Fonseca wrote:

Usually this kind of problem is related to csrf

check
https://docs.geoserver.org/latest/en/user/security/webadmin/csrf.html

and this
https://osgeo-org.atlassian.net/browse/GEOS-9353?inbox=true&=

Jakob Miksch <info@anonymised.com> escreveu no dia segunda, 25/05/2020 à(s) 12:17:

Dear all,

I am running GeoServer (standalone) on Debian. The port 8080 is
forwarded to port 80 using Apache HTTP server( with the ProxyPass
setting). This worked fine until we switched the server to HTTPS. The
GeoServer is still serving data and the Admin UI can still be accessed,
however most functions do not work and give the error:

HTTP ERROR 400
Problem accessing /geoserver/web/wicket
/bookmarkablerg.geoserver.web.data.resource.ResourceConfigurationPage.
Reason:
Origin does not correspond to request

Is there any recommendation how to setup a (standalone) GeoServer for
HTTPS in combination with Apache HTTP?

Thanks and best wishes,
Jakob

PS: Sorry if my question is too unspecific. I have a Geography
background and I am rather new to system administration. So, I am also
happy about any hints for resources where I can learn the basics of this
topic.


Geoserver-users mailing list

Please make sure you read the following two resources before posting to this list:

If you want to request a feature or an improvement, also see this: https://github.com/geoserver/geoserver/wiki/Successfully-requesting-and-integrating-new-features-and-improvements-in-GeoServer

Geoserver-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/geoserver-users

www.vfonsecaz.pt

-- 
Jakob Miksch
Geospatial Development
[www.jakobmiksch.eu](http://www.jakobmiksch.eu)