[
https://issues.apache.org/jira/browse/ARTEMIS-5559?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17987206#comment-17987206
]
Justin Bertram commented on ARTEMIS-5559:
-----------------------------------------
I believe this is already addressed in the upgrade documentation which states:
{quote}
It’s also worth noting that any request with an origin header using the
{{https}} scheme which is ultimately received by Jolokia via HTTP is now
discarded by default since it is deemed insecure. If you use a TLS proxy that
transforms secure requests to insecure requests (e.g. in a Kubernetes
environment) then consider changing the proxy to preserve HTTPS and switching
the [embedded web
server|https://activemq.apache.org/components/artemis/documentation/latest/embedded-web-server.html]
to HTTPS. If that isn’t feasible then you can accept the risk by adding
{{<ignore-scheme/>}} to {{etc/jolokia-access.xml}}. See the [Jolokia
documentation|https://jolokia.org/reference/html/manual/security.html] for more
details.{quote}
Did you try this solution already?
> Cannot proxy traffic to jolokia when SSL is terminated
> ------------------------------------------------------
>
> Key: ARTEMIS-5559
> URL: https://issues.apache.org/jira/browse/ARTEMIS-5559
> Project: ActiveMQ Artemis
> Issue Type: Bug
> Components: Web Console
> Reporter: Gašper Čefarin
> Priority: Major
> Attachments: jolokia_403.png, results2.png
>
>
> A problem appeared when upgrading from 2.37 to 2.41. I strongly suspect it
> happens when upgrading from jetty 11 to 12.
> This is one of the only visible problems - response from
> {{https://xxxxxxxxxx/console/jolokia}} (actual http response is 200)
> !jolokia_403.png|width=75%!
> This is how the "console" looks:
> !results2.png|width=75%!
> I was not able to find a solution yet which would work with haproxy.
> Exposing via jetty only works fine.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
For further information, visit: https://activemq.apache.org/contact
