Further IDP and Firefox Security Warning Message Questions

[Christopher Bongaarts]

Peterson, Tommy wrote:
> OK. I understand what you and Paul and Scott are saying.
> 
> But, if I do all of this, and I have to recreate the 8443 connector just like the docs say, why am I getting a blank white page when I try to even access even the tomcat manager page, when with my current set up? I just point the browser to https://(myidpsdomain):8443 and the Tomcat manager page shows up. When I change the settings in the 8443 connector to match what the Shibboleth docs have that URL shows a blank, white page with no errors printed to the the IDP or Tomcat logs.

I would expect you to get whatever the "root" tomcat page is (e.g. the 
"Congratulations on untarring Tomcat" page)...

> Will reconfiguring this and adding the following three to the 8443 connector will eliminate this issue? These issues are related then?
> *       SSLImplementation="edu.internet2.middleware.security.tomcat6.DelegateToApplicationJSSEImplementation"
> *       protocol="org.apache.coyote.http11.Http11Protocol"
> *       clientAuth="true"

So, a version 6 Tomcat default configuration has an HTTP listening on 
8080, a commented-out HTTPS listener on 8443, and an AJP listener on 
8009.  For your situation, you could just comment out the AJP listener 
(since you're not frontending with Apache), add the 8443 listener from 
the IdP installation page under "supporting SOAP endpoints", and point 
your load balancer port 443 (offloading SSL) at tomcat's port 8080, and 
LB port 8443 (no SSL offload) to tomcat 8443.

For testing, don't hit the root URL, as it is irrelevant to the IdP's 
operation.  Instead, try the status page at:

  https://youridploadbalanceraddress/idp/profile/Status

and see if you get the magical "OK".  Testing port 8443 is better left 
to trying an actual SP with it.

-- 
%%  Christopher A. Bongaarts   %%  cab at umn.edu          %%
%%  OIT - Identity Management  %%  http://umn.edu/~cab  %%
%%  University of Minnesota    %%  +1 (612) 625-1809    %%