Port 8443 and ProxyPass?

[Tim O'Connor]

I have a question about the use of port 8443.  What SHOULD happen when
going to the url:

https://sso-shibboleth-test.its.rmit.edu.au:8443/idp/profile/SAML2/SOAP/AttributeQuery

I am getting a 'connection refused' message.

We sit behind an f5 which does SSL off loading.  We did get port 8443
excluded from the F5 config, so it is meant to go straight through
unaltered.  In my apache config I have an entry for 8443:

<VirtualHost _default_:8443>

ServerName sso-shibboleth-test.its.rmit.edu.au:8443
SSLEngine on
SSLProtocol all -SSLv2
SSLCipherSuite ALL:!ADH:!EXPORT:!SSLv2:RC4+RSA:+HIGH:+MEDIUM:+LOW

SSLCertificateFile /software/shibboleth/cert/shibboleth-test.crt
SSLCertificateKeyFile /software/shibboleth/cert/shibboleth-test.key

SSLVerifyClient optional_no_ca
SSLVerifyDepth  10

SSLOptions -StdEnvVars +ExportCertData

SetEnvIf User-Agent ".*MSIE.*" \
nokeepalive ssl-unclean-shutdown \
downgrade-1.0 force-response-1.0

<IfModule mod_proxy_ajp.c>
        ProxyRequests Off

        <Proxy ajp://localhost:8009>
                Allow from all
        </Proxy>

        ProxyPass /idp ajp://localhost:8009/idp retry=5
</IfModule>

</VirtualHost>

What I am not sure about is the proxypass settings above, and how that
interacts with tomcat exactly...
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20121022/6812bab7/attachment.html