Home/ Questions/Q 7014841
In Process

The Archive Base Latest Questions

Editorial Team
  • 0
Asked: 2026-05-27T22:34:26+00:00

I am working on an old application which has huge code from legacy. Application

  • 0

I am working on an old application which has huge code from legacy.

Application is based on Spring 2.0 and using Acegi plugin for security. The Tomcat server is successfully configured on HTTPS port.

Now I need to redirect the login over HTTPS. I tries setting following in my template_spring_config.xml

<bean id="authenticationEntryPoint" class="src.auth.acegi.myAuthenticationProcessingFilterEntryPoint">
    <property name="loginFormUrl" value="http://@domain.name@/welcome"/>
    <property name="forceHttps" value="true"/>
</bean>

Help found so far indicates that this much should be enough to redirect on HTTPS. But this is not working at all and my Request for login remains on HTTP.

I cannot switch to Spring-Security and higher Spring versions due to time constraint.
Please help if you know what else I need to do.

Share

Leave an answer

You must login to add an answer.

Need An Account,

1 Answer

  1. Editorial Team

    It’s difficult to say for sure since you are using a custom entry point implementation (which may behave differently), but you are using an absolute URL, which will probably override the default logic for building the redirect. Try using https:// rather than http:// for your login URL scheme.

    Note that you really shouldn’t be using Acegi since development stopped on it a long time ago. It contains most (possibly all) of the vulnerabilities that have subsequently been patched in Spring Security. The same goes for Spring itself.

    • 0