Fortify 18 gives 404 Not Found even after reinstall

[ace2000]

Hello,

I have Fortify 18.10 running with Tomcat 8.5.32., Java JRE 1.8.0.181, and MySQL.  I installed everything over the course of a couple of days, able to get the JDBC drivers instsalled and seeded the database.  I did use the hostname newfortify and checked the box for host headers.

The next day I attempted to open the Fortify web console using the URL http://newfortify:8080/ssc and receiving the following 404:

HTTP Status 404 – Not Found

Type Status Report
Message /ssc
Description The origin server did not find a current representation for the target resource or is not willing to disclose that one exists.
Apache Tomcat/8.5.32

I confirmed that http://newfortify:8080 works fine, the Tomcat start page appears.  My services are all running, rebooted the server just in case.

Oddly enough, if I put an index.html in the /ssc directory, I'm unable to pull it up, same error. So tells me tomcat may not be working as expected.  Also, http://127.0.0.1:8080/ssc/ gives the same error as well.

Any ideas?  Thanks in advance! I've tried everything I can think of.

[ace2000]

Also, I'm not seeeing anything much in the logs in /apache-tomcat/logs.  Only localhost_access_log.2018-07-24 seems to update today when I try to browse pages. Is there another tomcat log I'm missing?

127.0.0.1 - - [24/Jul/2018:09:22:42 -0500] "GET /ssc HTTP/1.1" 404 1077
127.0.0.1 - - [24/Jul/2018:09:22:46 -0500] "GET /ssc HTTP/1.1" 404 1077
127.0.0.1 - - [24/Jul/2018:09:22:46 -0500] "GET /favicon.ico HTTP/1.1" 200 21630
127.0.0.1 - - [24/Jul/2018:09:31:42 -0500] "GET /ssc HTTP/1.1" 404 1077
127.0.0.1 - - [24/Jul/2018:09:31:42 -0500] "GET /favicon.ico HTTP/1.1" 200 21630
127.0.0.1 - - [24/Jul/2018:09:32:23 -0500] "GET /ssc/login.jsp HTTP/1.1" 404 1091
127.0.0.1 - - [24/Jul/2018:09:33:12 -0500] "GET /ssc/index.html HTTP/1.1" 404 1092
127.0.0.1 - - [24/Jul/2018:09:33:35 -0500] "GET /ssc/index.html HTTP/1.1" 404 1092
127.0.0.1 - - [24/Jul/2018:09:33:43 -0500] "GET /ssc/ HTTP/1.1" 404 1082

[andersonshatch]

Please check in your fortify.home folder for an ssc log. It should be at ${fortify.home}/ssc/logs/ssc.log
(fortify.home is the same place you found the init.token when setting up SSC for the first time)

This file should give more information about why SSC failed to start, or why it stopped. Could be that SSC couldn't establish a connection to the DB, or ran out of memory, for example.

-Josh
Fortify L3 support engineer

[ace2000]

I found these lines in the app.properties file.  I removed the server name in the host.url= part and set host.validation to false.  Still, when accessing Fortify via a web browser, it spins and spins and then displays the 404 error

# Host URL where SSC can be accessed, including context name, e.g. https://my.host:1234/ssc
host.url=

# Enable or disable HTTP Host header validation using host.url
host.validation=false

HTTP Status 404 – Not Found
Type Status Report

Message /scc/init.jsp

Description The origin server did not find a current representation for the target resource or is not willing to disclose that one exists.

Apache Tomcat/8.5.32

[ace2000]

I ended up doing a new installation. I removed the directories in the profile and tomcat folder. Re-deployed the WAR, and was able to go thorugh the setup again.  This time i gave it a host - fortify:8080 - but didn't check the box to require host headers.

I connected to the msql database and seeded it.  Then it asked me to reboot my server, which I did.  

However I now get the same error when trying to access SSC.

Here's the full log:

------------------------- Runtime Information -------------------------------
Fortify Runtime Properties
com.fortify.AuthenticationKey=C:\Windows\system32\config\systemprofile/.fortify/config/tools
com.fortify.InstallationUserName=SERVER55$
com.fortify.SCAExecutablePath=
com.fortify.VS.RequireASPPrecompilation=true
com.fortify.WorkingDirectory=C:\Windows\system32\config\systemprofile/.fortify
com.fortify.locale=en
com.fortify.search.defaultSyntaxVer=2
max.file.path.length=255

System Runtime Properties
awt.toolkit=sun.awt.windows.WToolkit
catalina.base=C:\apache-tomcat-8.5.32
catalina.home=C:\apache-tomcat-8.5.32
catalina.useNaming=true
com.fortify.Core=C:\apache-tomcat-8.5.32\webapps\ssc\WEB-INF/Core
com.fortify.DisableDescriptionXMLEscaping=true
com.fortify.DisableJNI=true
com.fortify.InstallRoot=C:\apache-tomcat-8.5.32\webapps\ssc\WEB-INF
com.fortify.LicenseFile=C:\Windows\system32\config\systemprofile\.fortify\fortify.license
com.fortify.LoadFPropsFromCP=true
com.fortify.StoreOriginalDescriptions=true
com.fortify.model.DisableProgramInfo=true
com.fortify.model.DisableSnippets=true
com.fortify.ssc.logPath=C:\Windows\system32\config\systemprofile\.fortify\ssc\logs
common.loader="${catalina.base}/lib","${catalina.base}/lib/*.jar","${catalina.home}/lib","${catalina.home}/lib/*.jar"
file.encoding=Cp1252
file.encoding.pkg=sun.io
file.separator=\
ignore.endorsed.dirs=C:\apache-tomcat-8.5.32\endorsed
java.awt.graphicsenv=sun.awt.Win32GraphicsEnvironment
java.awt.printerjob=sun.awt.windows.WPrinterJob
java.class.path=C:\apache-tomcat-8.5.32\bin\bootstrap.jar;C:\apache-tomcat-8.5.32\bin\tomcat-juli.jar
java.class.version=52.0
java.endorsed.dirs=C:\Program Files\Java\jre1.8.0_181\lib\endorsed
java.ext.dirs=C:\Program Files\Java\jre1.8.0_181\lib\ext;C:\Windows\Sun\Java\lib\ext
java.home=C:\Program Files\Java\jre1.8.0_181
java.io.tmpdir=C:\apache-tomcat-8.5.32\temp
java.library.path=C:\apache-tomcat-8.5.32\bin;C:\Windows\Sun\Java\bin;C:\Windows\system32;C:\Windows;C:\Program Files (x86)\Common Files\Oracle\Java\javapath;C:\Program Files\Microsoft MPI\Bin\;C:\ProgramData\Oracle\Java\javapath;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files\Microsoft SQL Server\Client SDK\ODBC\130\Tools\Binn\;C:\Program Files (x86)\Microsoft SQL Server\130\Tools\Binn\;C:\Program Files\Microsoft SQL Server\130\Tools\Binn\;C:\Program Files\Microsoft SQL Server\130\DTS\Binn\;;.
java.naming.factory.initial=org.apache.naming.java.javaURLContextFactory
java.naming.factory.url.pkgs=org.apache.naming
java.runtime.name=Java(TM) SE Runtime Environment
java.runtime.version=1.8.0_181-b13
java.specification.name=Java Platform API Specification
java.specification.vendor=Oracle Corporation
java.specification.version=1.8
java.util.concurrent.ForkJoinPool.common.threadFactory=org.apache.catalina.startup.SafeForkJoinWorkerThreadFactory
java.util.logging.config.file=C:\apache-tomcat-8.5.32\conf\logging.properties
java.util.logging.manager=org.apache.juli.ClassLoaderLogManager
java.vendor=Oracle Corporation
java.vendor.url=http://java.oracle.com/
java.vendor.url.bug=http://bugreport.sun.com/bugreport/
java.version=1.8.0_181
java.vm.info=mixed mode
java.vm.name=Java HotSpot(TM) 64-Bit Server VM
java.vm.specification.name=Java Virtual Machine Specification
java.vm.specification.vendor=Oracle Corporation
java.vm.specification.version=1.8
java.vm.vendor=Oracle Corporation
java.vm.version=25.181-b13
line.separator=

os.arch=amd64
os.name=Windows Server 2012 R2
os.version=6.3
package.access=sun.,org.apache.catalina.,org.apache.coyote.,org.apache.jasper.,org.apache.tomcat.
package.definition=sun.,java.,org.apache.catalina.,org.apache.coyote.,org.apache.jasper.,org.apache.naming.,org.apache.tomcat.
path.separator=;
server.loader=
shared.loader=
sun.arch.data.model=64
sun.boot.class.path=C:\Program Files\Java\jre1.8.0_181\lib\resources.jar;C:\Program Files\Java\jre1.8.0_181\lib\rt.jar;C:\Program Files\Java\jre1.8.0_181\lib\sunrsasign.jar;C:\Program Files\Java\jre1.8.0_181\lib\jsse.jar;C:\Program Files\Java\jre1.8.0_181\lib\jce.jar;C:\Program Files\Java\jre1.8.0_181\lib\charsets.jar;C:\Program Files\Java\jre1.8.0_181\lib\jfr.jar;C:\Program Files\Java\jre1.8.0_181\classes
sun.boot.library.path=C:\Program Files\Java\jre1.8.0_181\bin
sun.cpu.endian=little
sun.cpu.isalist=amd64
sun.desktop=windows
sun.io.unicode.encoding=UnicodeLittle
sun.jnu.encoding=Cp1252
sun.management.compiler=HotSpot 64-Bit Tiered Compilers
sun.os.patch.level=
tomcat.util.buf.StringCache.byte.enabled=true
tomcat.util.scan.StandardJarScanFilter.jarsToScan=log4j-web*.jar,log4j-taglib*.jar,log4javascript*.jar,slf4j-taglib*.jar
tomcat.util.scan.StandardJarScanFilter.jarsToSkip=bootstrap.jar,commons-daemon.jar,tomcat-juli.jar,annotations-api.jar,el-api.jar,jsp-api.jar,servlet-api.jar,websocket-api.jar,jaspic-api.jar,catalina.jar,catalina-ant.jar,catalina-ha.jar,catalina-storeconfig.jar,catalina-tribes.jar,jasper.jar,jasper-el.jar,ecj-*.jar,tomcat-api.jar,tomcat-util.jar,tomcat-util-scan.jar,tomcat-coyote.jar,tomcat-dbcp.jar,tomcat-jni.jar,tomcat-websocket.jar,tomcat-i18n-en.jar,tomcat-i18n-es.jar,tomcat-i18n-fr.jar,tomcat-i18n-ja.jar,tomcat-juli-adapters.jar,catalina-jmx-remote.jar,catalina-ws.jar,tomcat-jdbc.jar,tools.jar,commons-beanutils*.jar,commons-codec*.jar,commons-collections*.jar,commons-dbcp*.jar,commons-digester*.jar,commons-fileupload*.jar,commons-httpclient*.jar,commons-io*.jar,commons-lang*.jar,commons-logging*.jar,commons-math*.jar,commons-pool*.jar,jstl.jar,taglibs-standard-spec-*.jar,geronimo-spec-jaxrpc*.jar,wsdl4j*.jar,ant.jar,ant-junit*.jar,aspectj*.jar,jmx.jar,h2*.jar,hibernate*.jar,httpclient*.jar,jmx-tools.jar,jta*.jar,log4j*.jar,mail*.jar,slf4j*.jar,xercesImpl.jar,xmlParserAPIs.jar,xml-apis.jar,junit.jar,junit-*.jar,hamcrest-*.jar,easymock-*.jar,cglib-*.jar,objenesis-*.jar,ant-launcher.jar,cobertura-*.jar,asm-*.jar,dom4j-*.jar,icu4j-*.jar,jaxen-*.jar,jdom-*.jar,jetty-*.jar,oro-*.jar,servlet-api-*.jar,tagsoup-*.jar,xmlParserAPIs-*.jar,xom-*.jar
user.country=US
user.dir=C:\apache-tomcat-8.5.32
user.home=C:\Windows\system32\config\systemprofile
user.language=en
user.name=SERVER55$
user.script=
user.timezone=America/Chicago
user.variant=

VM Info
OperatingSystemMXBean: Windows Server 2012 R2
Arch: amd64
AvailableProcessors: 2
CommittedVirtualMemorySize: 5329313792
FreePhysicalMemorySize: 4436017152
FreeSwapSpaceSize: 2319609856
ProcessCpuLoad: 0.0
ProcessCpuTime: 47203125000
SystemCpuLoad: 1.0
SystemLoadAverage: -1.0
TotalPhysicalMemorySize: 8589524992
TotalSwapSpaceSize: 9931702272
Version: 6.3
RuntimeMXBean: 2232@SERVER55
BootClassPath: C:\Program Files\Java\jre1.8.0_181\lib\resources.jar;C:\Program Files\Java\jre1.8.0_181\lib\rt.jar;C:\Program Files\Java\jre1.8.0_181\lib\sunrsasign.jar;C:\Program Files\Java\jre1.8.0_181\lib\jsse.jar;C:\Program Files\Java\jre1.8.0_181\lib\jce.jar;C:\Program Files\Java\jre1.8.0_181\lib\charsets.jar;C:\Program Files\Java\jre1.8.0_181\lib\jfr.jar;C:\Program Files\Java\jre1.8.0_181\classes
BootClassPathSupported: true
ClassPath: C:\apache-tomcat-8.5.32\bin\bootstrap.jar;C:\apache-tomcat-8.5.32\bin\tomcat-juli.jar
LibraryPath: C:\apache-tomcat-8.5.32\bin;C:\Windows\Sun\Java\bin;C:\Windows\system32;C:\Windows;C:\Program Files (x86)\Common Files\Oracle\Java\javapath;C:\Program Files\Microsoft MPI\Bin\;C:\ProgramData\Oracle\Java\javapath;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files\Microsoft SQL Server\Client SDK\ODBC\130\Tools\Binn\;C:\Program Files (x86)\Microsoft SQL Server\130\Tools\Binn\;C:\Program Files\Microsoft SQL Server\130\Tools\Binn\;C:\Program Files\Microsoft SQL Server\130\DTS\Binn\;;.
ManagementSpecVersion: 1.2
SpecName: Java Virtual Machine Specification
SpecVendor: Oracle Corporation
SpecVersion: 1.8
StartTime: 1532559258367
Uptime: 31306
VmName: Java HotSpot(TM) 64-Bit Server VM
VmVendor: Oracle Corporation
VmVersion: 25.181-b13
-----------------------------------------------------------------------------
2018-07-25 17:54:54,722 [WARN] com.fortify.manager.DAO.fulltext.ModelMappingFactoryImpl - Fulltext search is disabled because searchIndex.location property has no value
2018-07-25 17:55:02,778 [WARN] com.fortify.manager.DAL.HibernateDatabaseInterface - Found unsupported JDBC driver name: "MySQL Connector/J"
2018-07-25 17:55:24,101 [WARN] com.fortify.manager.service.ldap.impl.LdapConfigRestorerImpl - Not loading ldap properties into DB because enabled flag is false.
2018-07-25 17:55:31,295 [WARN] org.springframework.web.context.support.XmlWebApplicationContext - Exception encountered during context initialization - cancelling refresh attempt: org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'hostHeaderFilter': Injection of autowired dependencies failed; nested exception is java.lang.IllegalArgumentException: Valid URL expected
2018-07-25 17:55:32,393 [ERROR] org.springframework.web.context.ContextLoader - Context initialization failed
org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'hostHeaderFilter': Injection of autowired dependencies failed; nested exception is java.lang.IllegalArgumentException: Valid URL expected
at org.springframework.beans.factory.annotation.AutowiredAnnotationBeanPostProcessor.postProcessPropertyValues(AutowiredAnnotationBeanPostProcessor.java:372) ~[spring-beans-4.3.15.RELEASE.jar:4.3.15.RELEASE]
at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.populateBean(AbstractAutowireCapableBeanFactory.java:1268) ~[spring-beans-4.3.15.RELEASE.jar:4.3.15.RELEASE]
at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.doCreateBean(AbstractAutowireCapableBeanFactory.java:553) ~[spring-beans-4.3.15.RELEASE.jar:4.3.15.RELEASE]
at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.createBean(AbstractAutowireCapableBeanFactory.java:483) ~[spring-beans-4.3.15.RELEASE.jar:4.3.15.RELEASE]
at org.springframework.beans.factory.support.AbstractBeanFactory$1.getObject(AbstractBeanFactory.java:312) ~[spring-beans-4.3.15.RELEASE.jar:4.3.15.RELEASE]
at org.springframework.beans.factory.support.DefaultSingletonBeanRegistry.getSingleton(DefaultSingletonBeanRegistry.java:230) ~[spring-beans-4.3.15.RELEASE.jar:4.3.15.RELEASE]
at org.springframework.beans.factory.support.AbstractBeanFactory.doGetBean(AbstractBeanFactory.java:308) ~[spring-beans-4.3.15.RELEASE.jar:4.3.15.RELEASE]
at org.springframework.beans.factory.support.AbstractBeanFactory.getBean(AbstractBeanFactory.java:197) ~[spring-beans-4.3.15.RELEASE.jar:4.3.15.RELEASE]
at org.springframework.beans.factory.support.DefaultListableBeanFactory.preInstantiateSingletons(DefaultListableBeanFactory.java:761) ~[spring-beans-4.3.15.RELEASE.jar:4.3.15.RELEASE]
at org.springframework.context.support.AbstractApplicationContext.finishBeanFactoryInitialization(AbstractApplicationContext.java:867) ~[spring-context-4.3.15.RELEASE.jar:4.3.15.RELEASE]
at org.springframework.context.support.AbstractApplicationContext.refresh(AbstractApplicationContext.java:543) ~[spring-context-4.3.15.RELEASE.jar:4.3.15.RELEASE]
at org.springframework.web.context.ContextLoader.configureAndRefreshWebApplicationContext(ContextLoader.java:443) ~[spring-web-4.3.15.RELEASE.jar:4.3.15.RELEASE]
at org.springframework.web.context.ContextLoader.initWebApplicationContext(ContextLoader.java:325) [spring-web-4.3.15.RELEASE.jar:4.3.15.RELEASE]
at org.springframework.web.context.ContextLoaderListener.contextInitialized(ContextLoaderListener.java:107) [spring-web-4.3.15.RELEASE.jar:4.3.15.RELEASE]
at org.apache.catalina.core.StandardContext.listenerStart(StandardContext.java:4790) [catalina.jar:8.5.32]
at org.apache.catalina.core.StandardContext.startInternal(StandardContext.java:5256) [catalina.jar:8.5.32]
at org.apache.catalina.util.LifecycleBase.start(LifecycleBase.java:150) [catalina.jar:8.5.32]
at org.apache.catalina.core.ContainerBase.addChildInternal(ContainerBase.java:754) [catalina.jar:8.5.32]
at org.apache.catalina.core.ContainerBase.addChild(ContainerBase.java:730) [catalina.jar:8.5.32]
at org.apache.catalina.core.StandardHost.addChild(StandardHost.java:734) [catalina.jar:8.5.32]
at org.apache.catalina.startup.HostConfig.deployWAR(HostConfig.java:985) [catalina.jar:8.5.32]
at org.apache.catalina.startup.HostConfig$DeployWar.run(HostConfig.java:1857) [catalina.jar:8.5.32]
at java.util.concurrent.Executors$RunnableAdapter.call(Unknown Source) [?:1.8.0_181]
at java.util.concurrent.FutureTask.run(Unknown Source) [?:1.8.0_181]
at java.util.concurrent.ThreadPoolExecutor.runWorker(Unknown Source) [?:1.8.0_181]
at java.util.concurrent.ThreadPoolExecutor$Worker.run(Unknown Source) [?:1.8.0_181]
at java.lang.Thread.run(Unknown Source) [?:1.8.0_181]
Caused by: java.lang.IllegalArgumentException: Valid URL expected
at com.fortify.manager.web.filters.HostHeaderFilter.setHostUrl(HostHeaderFilter.java:64) ~[ssc-core-18.10.0187.jar:?]
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) ~[?:1.8.0_181]
at sun.reflect.NativeMethodAccessorImpl.invoke(Unknown Source) ~[?:1.8.0_181]
at sun.reflect.DelegatingMethodAccessorImpl.invoke(Unknown Source) ~[?:1.8.0_181]
at java.lang.reflect.Method.invoke(Unknown Source) ~[?:1.8.0_181]
at org.springframework.beans.factory.annotation.AutowiredAnnotationBeanPostProcessor$AutowiredMethodElement.inject(AutowiredAnnotationBeanPostProcessor.java:701) ~[spring-beans-4.3.15.RELEASE.jar:4.3.15.RELEASE]
at org.springframework.beans.factory.annotation.InjectionMetadata.inject(InjectionMetadata.java:88) ~[spring-beans-4.3.15.RELEASE.jar:4.3.15.RELEASE]
at org.springframework.beans.factory.annotation.AutowiredAnnotationBeanPostProcessor.postProcessPropertyValues(AutowiredAnnotationBeanPostProcessor.java:366) ~[spring-beans-4.3.15.RELEASE.jar:4.3.15.RELEASE]
... 26 more
Caused by: java.net.MalformedURLException: unknown protocol: fortify
at java.net.URL.<init>(Unknown Source) ~[?:1.8.0_181]
at java.net.URL.<init>(Unknown Source) ~[?:1.8.0_181]
at java.net.URL.<init>(Unknown Source) ~[?:1.8.0_181]
at com.fortify.manager.web.filters.HostHeaderFilter.setHostUrl(HostHeaderFilter.java:62) ~[ssc-core-18.10.0187.jar:?]
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) ~[?:1.8.0_181]
at sun.reflect.NativeMethodAccessorImpl.invoke(Unknown Source) ~[?:1.8.0_181]
at sun.reflect.DelegatingMethodAccessorImpl.invoke(Unknown Source) ~[?:1.8.0_181]
at java.lang.reflect.Method.invoke(Unknown Source) ~[?:1.8.0_181]
at org.springframework.beans.factory.annotation.AutowiredAnnotationBeanPostProcessor$AutowiredMethodElement.inject(AutowiredAnnotationBeanPostProcessor.java:701) ~[spring-beans-4.3.15.RELEASE.jar:4.3.15.RELEASE]
at org.springframework.beans.factory.annotation.InjectionMetadata.inject(InjectionMetadata.java:88) ~[spring-beans-4.3.15.RELEASE.jar:4.3.15.RELEASE]
at org.springframework.beans.factory.annotation.AutowiredAnnotationBeanPostProcessor.postProcessPropertyValues(AutowiredAnnotationBeanPostProcessor.java:366) ~[spring-beans-4.3.15.RELEASE.jar:4.3.15.RELEASE]
... 26 more
2018-07-25 17:55:32,409 [ERROR] org.apache.catalina.core.ContainerBase.[Catalina].[localhost].[/ssc] - Exception sending context initialized event to listener instance of class [org.springframework.web.context.ContextLoaderListener]
org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'hostHeaderFilter': Injection of autowired dependencies failed; nested exception is java.lang.IllegalArgumentException: Valid URL expected
at org.springframework.beans.factory.annotation.AutowiredAnnotationBeanPostProcessor.postProcessPropertyValues(AutowiredAnnotationBeanPostProcessor.java:372) ~[spring-beans-4.3.15.RELEASE.jar:4.3.15.RELEASE]
at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.populateBean(AbstractAutowireCapableBeanFactory.java:1268) ~[spring-beans-4.3.15.RELEASE.jar:4.3.15.RELEASE]
at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.doCreateBean(AbstractAutowireCapableBeanFactory.java:553) ~[spring-beans-4.3.15.RELEASE.jar:4.3.15.RELEASE]
at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.createBean(AbstractAutowireCapableBeanFactory.java:483) ~[spring-beans-4.3.15.RELEASE.jar:4.3.15.RELEASE]
at org.springframework.beans.factory.support.AbstractBeanFactory$1.getObject(AbstractBeanFactory.java:312) ~[spring-beans-4.3.15.RELEASE.jar:4.3.15.RELEASE]
at org.springframework.beans.factory.support.DefaultSingletonBeanRegistry.getSingleton(DefaultSingletonBeanRegistry.java:230) ~[spring-beans-4.3.15.RELEASE.jar:4.3.15.RELEASE]
at org.springframework.beans.factory.support.AbstractBeanFactory.doGetBean(AbstractBeanFactory.java:308) ~[spring-beans-4.3.15.RELEASE.jar:4.3.15.RELEASE]
at org.springframework.beans.factory.support.AbstractBeanFactory.getBean(AbstractBeanFactory.java:197) ~[spring-beans-4.3.15.RELEASE.jar:4.3.15.RELEASE]
at org.springframework.beans.factory.support.DefaultListableBeanFactory.preInstantiateSingletons(DefaultListableBeanFactory.java:761) ~[spring-beans-4.3.15.RELEASE.jar:4.3.15.RELEASE]
at org.springframework.context.support.AbstractApplicationContext.finishBeanFactoryInitialization(AbstractApplicationContext.java:867) ~[spring-context-4.3.15.RELEASE.jar:4.3.15.RELEASE]
at org.springframework.context.support.AbstractApplicationContext.refresh(AbstractApplicationContext.java:543) ~[spring-context-4.3.15.RELEASE.jar:4.3.15.RELEASE]
at org.springframework.web.context.ContextLoader.configureAndRefreshWebApplicationContext(ContextLoader.java:443) ~[spring-web-4.3.15.RELEASE.jar:4.3.15.RELEASE]
at org.springframework.web.context.ContextLoader.initWebApplicationContext(ContextLoader.java:325) ~[spring-web-4.3.15.RELEASE.jar:4.3.15.RELEASE]
at org.springframework.web.context.ContextLoaderListener.contextInitialized(ContextLoaderListener.java:107) ~[spring-web-4.3.15.RELEASE.jar:4.3.15.RELEASE]
at org.apache.catalina.core.StandardContext.listenerStart(StandardContext.java:4790) [catalina.jar:8.5.32]
at org.apache.catalina.core.StandardContext.startInternal(StandardContext.java:5256) [catalina.jar:8.5.32]
at org.apache.catalina.util.LifecycleBase.start(LifecycleBase.java:150) [catalina.jar:8.5.32]
at org.apache.catalina.core.ContainerBase.addChildInternal(ContainerBase.java:754) [catalina.jar:8.5.32]
at org.apache.catalina.core.ContainerBase.addChild(ContainerBase.java:730) [catalina.jar:8.5.32]
at org.apache.catalina.core.StandardHost.addChild(StandardHost.java:734) [catalina.jar:8.5.32]
at org.apache.catalina.startup.HostConfig.deployWAR(HostConfig.java:985) [catalina.jar:8.5.32]
at org.apache.catalina.startup.HostConfig$DeployWar.run(HostConfig.java:1857) [catalina.jar:8.5.32]
at java.util.concurrent.Executors$RunnableAdapter.call(Unknown Source) [?:1.8.0_181]
at java.util.concurrent.FutureTask.run(Unknown Source) [?:1.8.0_181]
at java.util.concurrent.ThreadPoolExecutor.runWorker(Unknown Source) [?:1.8.0_181]
at java.util.concurrent.ThreadPoolExecutor$Worker.run(Unknown Source) [?:1.8.0_181]
at java.lang.Thread.run(Unknown Source) [?:1.8.0_181]
Caused by: java.lang.IllegalArgumentException: Valid URL expected
at com.fortify.manager.web.filters.HostHeaderFilter.setHostUrl(HostHeaderFilter.java:64) ~[ssc-core-18.10.0187.jar:?]
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) ~[?:1.8.0_181]
at sun.reflect.NativeMethodAccessorImpl.invoke(Unknown Source) ~[?:1.8.0_181]
at sun.reflect.DelegatingMethodAccessorImpl.invoke(Unknown Source) ~[?:1.8.0_181]
at java.lang.reflect.Method.invoke(Unknown Source) ~[?:1.8.0_181]
at org.springframework.beans.factory.annotation.AutowiredAnnotationBeanPostProcessor$AutowiredMethodElement.inject(AutowiredAnnotationBeanPostProcessor.java:701) ~[spring-beans-4.3.15.RELEASE.jar:4.3.15.RELEASE]
at org.springframework.beans.factory.annotation.InjectionMetadata.inject(InjectionMetadata.java:88) ~[spring-beans-4.3.15.RELEASE.jar:4.3.15.RELEASE]
at org.springframework.beans.factory.annotation.AutowiredAnnotationBeanPostProcessor.postProcessPropertyValues(AutowiredAnnotationBeanPostProcessor.java:366) ~[spring-beans-4.3.15.RELEASE.jar:4.3.15.RELEASE]
... 26 more
Caused by: java.net.MalformedURLException: unknown protocol: fortify
at java.net.URL.<init>(Unknown Source) ~[?:1.8.0_181]
at java.net.URL.<init>(Unknown Source) ~[?:1.8.0_181]
at java.net.URL.<init>(Unknown Source) ~[?:1.8.0_181]
at com.fortify.manager.web.filters.HostHeaderFilter.setHostUrl(HostHeaderFilter.java:62) ~[ssc-core-18.10.0187.jar:?]
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) ~[?:1.8.0_181]
at sun.reflect.NativeMethodAccessorImpl.invoke(Unknown Source) ~[?:1.8.0_181]
at sun.reflect.DelegatingMethodAccessorImpl.invoke(Unknown Source) ~[?:1.8.0_181]
at java.lang.reflect.Method.invoke(Unknown Source) ~[?:1.8.0_181]
at org.springframework.beans.factory.annotation.AutowiredAnnotationBeanPostProcessor$AutowiredMethodElement.inject(AutowiredAnnotationBeanPostProcessor.java:701) ~[spring-beans-4.3.15.RELEASE.jar:4.3.15.RELEASE]
at org.springframework.beans.factory.annotation.InjectionMetadata.inject(InjectionMetadata.java:88) ~[spring-beans-4.3.15.RELEASE.jar:4.3.15.RELEASE]
at org.springframework.beans.factory.annotation.AutowiredAnnotationBeanPostProcessor.postProcessPropertyValues(AutowiredAnnotationBeanPostProcessor.java:366) ~[spring-beans-4.3.15.RELEASE.jar:4.3.15.RELEASE]
... 26 more

[ace2000 · Accepted solution]

Got it figured out.

So the field asking for the URL to fortify needs an exact syntax.  The app.properties file shows you what that syntax is.  It needs the http or https plus the subdirectory, like

https://fortifyserver:8443/ssc

Updated my app.properties file, restarted Apache and working.
Also, I had an additional problem where Chrome was caching the 404 error. I had been force reloading the page, but apparently that wasn't doing it. I was able to open it up in IE fine after the above update.