[OOZIE-1257] Make Oozie client automatically redirect from http to https when https is enabled

• Type: Improvement
• Status: Open
• Priority: Major
• Resolution: Unresolved
• Affects Version/s: trunk, 3.3.2
• Component/s: security
• Assignee: Unassigned
• Reporter: Robert Kanter
• Created: 08/Mar/13 00:43
• Updated: 04/Apr/13 18:45

Description

OOZIE-1233 adds the ability to more easily and consistently configure Oozie to use HTTPS instead of HTTP. Browsers will redirect the user from the http url to the https one (e.g. http://localhost:11000/oozie --> https://localhost:11443/oozie), but the oozie client will not.

According to this "because of serious security consequences, redirection between HTTP and HTTPS is not automatically followed [in Java]". However, that same page also gives a workaround; we should see if that actually works because it would be easier for users if the Oozie client redirected.

Issue Links

• is related to: OOZIE-1233 Add ability to configure Oozie to use HTTPS (SSL)
• links to: Redirection between HTTP and HTTPS URLs is not followed