Firefox warning continues

[Peterson, Tommy]

OK. So I installed Tomcat 6 and got the SSLImplementation working. That took care of the problem.

However, I am still getting the Firefox Warning (Although this page is encrypted, the information you have entered is to be sent over an unencrypted connection and could easily be read by a third party.
Are you sure you want to continue sending this information?)after I am authenticated via the log in page Shibboleth brings up and am returned to the protected source. So I  don't know how to fix this. Again the loadbalancer is terminating SSL on the LB but 80 and 443 ports are open on the SP side. LB has 8443 port open on the IDP side. I have the metadata endpoints (except soap and queries which are https and 8443) as https and :443.

The only error message that I am getting is in the SP apache logs. It points to the Virtual host. It says:
[Fri Aug 12 15:24:37 2011] [error] [client (idp address)] Invalid method in request \x16\x03\x01

So I am back to the Virtual Host as most likely the issue here that this forum helped me set up. It is pasted below.

Listen 443
NameVirtualHost *:80
<VirtualHost *:80>
ServerName https://(my domain):443

<Location />
AuthType shibboleth
require shibboleth
</Location>

<Location /Shibboleth.sso>
AuthType shibboleth
require shibboleth
</Location>

<Location /shibboleth-sp>
     Allow from all
</Location>

ServerAdmin admin@(mydomain)
ErrorLog "/usr/local/zend/apache2/logs/error_log"
TransferLog "/usr/local/zend/apache2/logs/access_log"
UseCanonicalName On
SSLEngine on
SSLCipherSuite (myciphersuite)
SSLCertificateFile "/usr/local/zend/apache2/conf/extra/(mydomain.crt"
SSLCertificateKeyFile "/usr/local/zend/apache2/conf/extra/myserver.key"
SSLCertificateChainFile "/usr/local/zend/apache2/conf/extra/chain.crt"


Is this because the LB is terminating SSL. So the SSL is broken at that point. But then my SP picks up SSL again with the above Virtual Host? Because once the user lands back on the SPs the browser shows SSl and the certificates.



Thanks,
Tommy

________________________________
This message contains Devin Group confidential information and is intended only for the individual named. If you are not the named addressee you should not disseminate, distribute or copy this e-mail.
Please notify the sender immediately by e-mail if you have received this e-mail in error and delete this e-mail from your system. E-mail transmissions cannot be guaranteed secure, error-free and information could be intercepted, corrupted, lost, destroyed, arrive late, incomplete, or contain viruses. The sender therefore does not accept liability for errors or omissions in the contents of this message which may arise as result of transmission. If verification is required please request hard-copy version.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20110812/fb736c0f/attachment-0001.html