Shibboleth client certificate

[Nate Klingenstein]

Adam,

You're likely to have configured your web server -- Tomcat, if  
listening directly on the port where your login page is hosted, or  
Apache, if it's fronting that Tomcat -- to request client SSL  
certificates on that port.  Shibboleth itself wouldn't be making that  
request.

Check server.xml or httpd.conf for erroneous directives first.  I  
would guess you accidentally used configuration intended for port  
8443(for back-channel calls between SP's and your IdP) for port 443.

Take care,
Nate.

On May 9, 2012, at 18:55 , Adam Jones wrote:

> When my SP sends my browser over to our local IdP to the login page,  
> it requests from me a client SSL certificate and fails when I do not  
> allow it.   Is it normal to require the client browser's SSL  
> certificate or is there a setting I missed?

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20120509/6c675dc0/attachment.html