Forum Discussion

Toni_5704's avatar
Toni_5704
Icon for Nimbostratus rankNimbostratus
Oct 26, 2010

irules and j_security_check

Hello,     Our security officer asked us to secure via SSL the user/password sent by our login page, and we would like to use the F5 to do this.       We are using the standard Jakarta T...
application delivery
dev
devops
iRules
hooleylist's avatar
hooleylist
Icon for Cirrostratus rankCirrostratus
Oct 27, 2010
Couldn't you configure Tomcat to use HTTPS? Else, you could potentially use a stream profile and STREAM::expression based iRule to rewrite the form action from a local reference (HTTP) to an absolute reference with HTTPS. You'd also need to serve any content that the form action URL calls to avoid getting an insecure content warning on browsers.

 

 

Here's the wiki page for the stream related events and commands:

 

 

http://devcentral.f5.com/wiki/default.aspx/iRules/stream

 

 

The STREAM::expression page has a few examples:

 

 

http://devcentral.f5.com/wiki/default.aspx/iRules/stream__expression

 

 

Aaron