Shibboleth client certificate

[Cantor, Scott]

On 5/9/12 3:34 PM, "Adam Jones" <amjones at skidmore.edu> wrote:

>I may have misunderstood the documentation - on what port should tomcat6
>be listening to for the login jsp page? I ask because, apache is already
>listening on 443 (should I turn it off and let tomcat take care of that,
>then?).

No browser should be using non-default ports. How you do it all is up to
you. If you want Apache, proxy 443 with AJP. If you don't, turn it off.

Personally I think it's confusing to have two web servers facing out, but
if you need Apache on 443 and prefer the advantage of avoiding the mod_ssl
hassles with client cert handling, there's an argument to doing that. And
there's the argument that if you don't need SOAP, don't offer it anyway.

-- Scott