Shibboleth IdP (Tomcat6/OpenJDK1.6) Fresh Install Issues

[Kevin P. Foote]

On Tue, 1 Oct 2013, Joaquin Menchaca wrote:

> I found that if I go through the default 8080 port, I can get an "ok":
>
>    lynx http://127.0.0.1:8080/idp/profile/Status
>
>
> However, I am not able to go through 8443:
>
>    lynx https://127.0.0.1:8443/idp/profile/Status
>
>    Looking up 127.0.0.1:8443
>    Making HTTPS connection to 127.0.0.1:8443
>    Retrying connection without TLS.
>    Looking up 127.0.0.1:8443
>    Making HTTPS connection to 127.0.0.1:8443
>    Alert!: Unable to make secure connection to remote host.
>
>    lynx: Can't access startfile https://127.0.0.1:8443/idp/profile/Status
>
> Is there anything else I can investigate?
>
> My connector is configured as:
>
>    <Connector port="8443"
>           protocol="org.apache.coyote.http11.Http11Protocol"
>
> SSLImplementation="edu.internet2.middleware.security.tomcat6.DelegateToApplicationJSSEImplementation"
>           scheme="https"
>           SSLEnabled="true"
>           clientAuth="true"
>           keystoreFile="/opt/shibboleth-idp/credentials/idp.jks"
>           keystorePass="XXXXXXXXXXX" />
>
>
>

Its been a while.. but..

8443 is for the backchannel communication when using older SAML 1.1


You will not see the endpoints or locations you see on the frontside communication
port generally (443) or if your offloading via apache or balancer 
your normal www port..

------
thanks
  kevin.foote