Non TLS ports for the IdP.

Rod Widdowson rdw at steadingsoftware.com
Tue Dec 9 11:57:46 EST 2014


I am tryign to review the Jetty documentation and make the QI install match.


I note that 

https://wiki.shibboleth.net/confluence/pages/viewpage.action?title=SecurityA
ndNetworking&spaceKey=IDP30

Says

>You should essentially never operate the IdP without TLS, so port 80 should
only be used to perform that redirect.

And I remember turning on port 80 for the QI.  Some research reminded me
that this is because all of the CLI tools wants to speak to
http://localhost:80/ 

Should we change these to default to port 8080? (and then I'll move the QI
jetty to use 8080 as well?) .  Before anyone asks, using https://localhost
doesn't work too good because of the certificate name and all the other pain
associated with java and certificates.

/Rod



More information about the dev mailing list