block http access (without blank page) on JBoss AS 7

[khehwan]

I need to disable HTTP access and only allow HTTPS access to jboss server. Therefore, I have remove the http connector and add https connector to standalone.xml.

It works correctly. However, when user try to access the website using http protocol with ssl port (ex: http://hostname:<ssl-port>/), then a blank page is shown.

This is quite annoying as user might thought that the website has problem. How can I block http access completely (instead of a blank page is shown)?

Below is the my standalone.xml configuration:

        <subsystem xmlns="urn:jboss:domain:web:1.1" default-virtual-server="default-host" instance-id="main" native="false">
            <connector name="https" protocol="HTTP/1.1" scheme="https" socket-binding="https" secure="true">
                <ssl name="ssl" key-alias="ssl" password="123456" certificate-key-file="key.keystore" protocol="TLSv1" />
            </connector>
            <virtual-server name="default-host" enable-welcome-root="false"/>
        </subsystem>

Thank you.

[dlofthouse]

I am not sure how much we can do here although may be worth raising a Jira so we can investigate for future releases.

In this case there is not a lot that the server is actually doing as it requires the SSL connection to be established before it can send anything to the client so this blank page is the web browsers decision after a failed connection attempt.

[erasmomarciano]

Hi

If you see a blank page it doesn't mean that the connector http is disable

Check if the port http default (8080) is up

try

netstat -an | grep 8080

[khehwan]

netstat -an | grep <http port>     --> no result

netstat -an | grep <https port>    --> has result

When I access it via http://<host name>:<http port>, a connection time out page is shown on the browser.

When I access it via http://<host name>:<https port>, a blank page is shown on the browser.      <-- unwanted behavior, I want it to show connection time out page

When I access it via https://<host name>:<https port>, correct web page is shown on the browser.

So, I think the http connector has been disabled. Correct me if I am wrong

[erasmomarciano]

This depends on the configuration your broswer

Example I have this message

Network Access Message: The website cannot be found

Try

netstat -an | grep 8080

Or

Try via http://127.0.0.1:6666

What do you see?

[khehwan]

8080 is http port, right?

I have try

netstat -an | grep 8080 (or http port)

and there is no result.

When accessing http://127.0.0.1:6666/ , error message "This webpage is not available" is seen.

BTW, what is this port 6666?

netstat -an | grep 6666

has no result too.

[jaikiran]

khehwan wrote:

However, when user try to access the website using http protocol with ssl port (ex: http://hostname:<ssl-port>/), then a blank page is shown.

Does anyone do that? If yes, why?