Tomcat 8.5.51 - secretRequired="false" 的问题

Question

secretRequired="false"添加到AJP连接器的选项是server.xml。但是，连接器不会以Protocol handler start failed错误开始。它位于 Apache Server 2.4.25 版之后。

    <Connector port="8009"
               address="127.0.0.1" tomcatAuthentication="false" URIEncoding="UTF-8" enableLookups="false"
               protocol="AJP/1.3" redirectPort="8663" connectionTimeout="600000" secretRequired="false" />

错误：

Caused by: java.lang.IllegalArgumentException: The AJP Connector is configured with secretRequired="true" but the secret attribute is either null or "". This combination is not valid.

谢谢

Answer 1

添加address属性并指定环回地址对我在 Tomcat 8.5.54 上有用。

<Connector port="8009" protocol="AJP/1.3" redirectPort="8443" address="0.0.0.0" secretRequired="false" />

Answer 2

Tomcat 9.0.34 现在默认将 SecretReqiured 设置为 true 以解决 CVS 问题。

有关此问题的详细信息，请参阅以下 URL：
https://access.redhat.com/solutions/4851251 https://tomcat.apache.org/tomcat-9.0-doc/config/ajp.html https://github.com/spring-projects/spring-boot/issues/20377