PQ25655: WRONG PROTOCOL RETURNED WITH SERLVET USING HTTPSERVLETREQUEST GETSCHEME METHOD

APAR status

• Closed as fixed if next.

Error description

• User has written servlet which should return the protocol
  of the request (http or https or ftp), however when running
  under SSL connection, the servlet returns 'http' instead
  of 'https'.
  Cust servlet:
    public static String getURI(HttpServletRequest req)
    {
     String scheme = req.getScheme();  //returns http always
     String name = req.getServerName();
     return scheme+"://+name;
    }
  From the Java API documentation available for javax.servlet.http
  package which contains HttpServletRequest
  (ref: http://jserv.javasoft.com/products/java-server/documentati
   on/webserver1.1/apidoc/javax.servlet.http.HttpServletResponse.h
   tml) link to the ServletRequest which it is extended from
  the getScheme() indicates it should return 'http', 'https', or
  'ftp'.
  Recreation servlet forwarded to L3(LP).
  Note: also tested with WAS 2.0 on NT and same failure
        occurred.
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED: All users of SSL with ServletExpress on      *
  *                 OS/390.                                      *
  ****************************************************************
  * PROBLEM DESCRIPTION: The java function getScheme() returns   *
  *                      http as the type of request instead of  *
  *                      https when the request is sent to a     *
  *                      servlet over an SSL connection.         *
  ****************************************************************
  * RECOMMENDATION:                                              *
  ****************************************************************
  Whenever an OS/390 webserver with ServletExpress and SSL
  enabled is started, method getScheme returns http as the
  request scheme value instead of the expected value of https.
  

Problem conclusion

Temporary fix

Comments

• This problem is fixed in the WebSphere Application Server
  releases.
  

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

Applicable component levels

• R100 PSN

     UP