4

How would I go about configuring Geoserver to only load from an https address? I have been combing the web and cannot find any solution.

SketchyTurtle
  • 423
  • 1
  • 5
  • 20
  • 1
    a bit off topic but for more security you could even configure geoserver to run with SSL http://docs.geoserver.org/latest/en/user/security/tutorials/cert/ – elasticrash Oct 12 '15 at 16:49

2 Answers2

7

I think that this question is not exactly related to geoserver.

You should configure your java application server (tomcat or whatever) to use https. Geoserver will inherit that configuration

If you are using tomcat you can try to follow this instructions. Or as stated in the comments, now geoserver doc also includes how to configure tomcat for ssl.

Francisco Puga
  • 23,869
  • 5
  • 48
  • 64
  • 1
    GeoServer docs cover this: https://docs.geoserver.org/stable/en/user/security/tutorials/cert/index.html#configure-tomcat-for-ssl – migwellian Jun 10 '19 at 17:38
3

If you make use of a proxy, e.g. Nginx. Make sure to set the correct Proxy Url in GeoServer. If not set correctly, GeoServer will advertise with HTTP when asked for it's capabilities. You can check it yourself by opening WMS_MS_Capabilities.dtd in your browser.

https://youserver.com/geoserver/schemas/wms/1.1.1/WMS_MS_Capabilities.dtd

or

https://youserver.com/schemas/wms/1.1.1/WMS_MS_Capabilities.dtd

mipmip
  • 1,072
  • 1
  • 10
  • 24