title: CAS login/redirect not working because of http/https conflict
body: <p>I have a CAS server, mostly still default, running on http via port:8080, and https via port:8008</p>
  
  <p>The production environment is CAS 3.4.11, tomcat 5, and is using maven2 deployment</p>
  
  <p>When someone logs in, and we try to navigate the CAS site to something like <code>https://mydomain:8008/cas/services/manage.html</code> to verify their login it redirects them to:
  <code>HTTP://mydomain:8008/cas/login</code></p>
  
  <p>Tomcat is configured to serve up https ONLY on port 8008, causing the unsuspecting browser to receive an encrypted byte stream via http and offers it to the user as a download.</p>
  
  <p>I'm new to CAS, and I know somewhere in the configs is the option to use HTTPS in the redirects as opposed to http but I have not found it yet.</p>
  
  <p>When your answer, PLEASE, I am tired of CAS documentation sites and blogs that say p:client-use-https="true" as their entire explanation. I need file, section/subsection, bean, and other relevant info to best practices.</p>
  
  <p>I also recognize that tomcat, which I have never worked with before, could be configured to refuse/redirect http requests to https on a select port. Preferably I would like to enact both solutions.</p>