Non TLS ports for the IdP.
Rod Widdowson
rdw at steadingsoftware.com
Tue Dec 9 11:57:46 EST 2014
I am tryign to review the Jetty documentation and make the QI install match.
I note that
https://wiki.shibboleth.net/confluence/pages/viewpage.action?title=SecurityA
ndNetworking&spaceKey=IDP30
Says
>You should essentially never operate the IdP without TLS, so port 80 should
only be used to perform that redirect.
And I remember turning on port 80 for the QI. Some research reminded me
that this is because all of the CLI tools wants to speak to
http://localhost:80/
Should we change these to default to port 8080? (and then I'll move the QI
jetty to use 8080 as well?) . Before anyone asks, using https://localhost
doesn't work too good because of the certificate name and all the other pain
associated with java and certificates.
/Rod
More information about the dev
mailing list