IIS 7.5 Server behind an F5 Reverse Proxy

[Cantor, Scott]

On 8/19/14, 11:38 AM, "Meiselman, Ellen" <emeiselm at med.umich.edu<mailto:emeiselm at med.umich.edu>> wrote:

How do I set up the SSL certs so shibboleth will work for requests that come in to
https://proxyserver.com? I have only very basic knowledge of how to install and bind certs.

The SSL certs are unrelated to Shibboleth, that's just basic web site set up. I have no idea how you're planning t deploy it, there could be SSL on one or both legs, and the certs are going to be different on the two layers, but none of them are used by the SP.

Right now I can't get Shibboleth working again. The plugin is up and running but I can't get the appropriate metadata from the IDP because I can't give them the correct certificate - at least I don't *think* I can. I don't know how to install a certificate that is for another hostname.

The certificate in the SP has nothing to do with SSL server use, and doesn't change here whether there's a proxy or not.

And, you don't get metadata from an IdP by authenticating with a certificate. Metadata is signed and generally made available on a web site, it's not protected. If it is, that's a matter for you and your administrator I suppose.

-- Scott

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20140819/8def8b62/attachment.html