Non TLS ports for the IdP.

[Cantor, Scott]

On 12/9/14, 4:57 PM, "Rod Widdowson" <rdw at steadingsoftware.com> wrote:


>
>And I remember turning on port 80 for the QI.  Some research reminded me
>that this is because all of the CLI tools wants to speak to
>http://localhost:80/ 

Do they? I thought I used 443, but maybe I was trying to dodge the cert 
trust issue.

>Should we change these to default to port 8080? (and then I'll move the QI
>jetty to use 8080 as well?) .  Before anyone asks, using https://localhost
>doesn't work too good because of the certificate name and all the other 
>pain
>associated with java and certificates.

I wouldn't use port 8080, 80 is fine, but I guess the ideal might be to 
lock 80 to the loopback interface. I don't know if we can do that easily 
in the Jetty files. Probably if we alter some properties.

-- Scott