IdP TLS termination at load balancer

[Cantor, Scott]

On 4/22/15, 8:22 PM, "Sean Mason" <sean.mason at uwaterloo.ca> wrote:


>
>The document: 
>https://wiki.eclipse.org/Jetty/Howto/Configure_mod_proxy#Proxying_SSL_on_A
>pache_to_HTTP_on_Jetty seems to suggest that configuration of Jetty to 
>work within this type of environment is possible without having to set 
>x-forwarded-* headers on the load balancer, but I did not investigate any 
>further.

Astonishingly, I don't see what I would have expected to see, simple 
properties to override the values like Tomcat has. I guess that's at least 
one thing Tomcat has (and all web servers but IIS have) that Jetty hasn't 
implemented for whatever reason. Their solution is to force people to 
subclass the Connectors by hand and override the properties that way, 
which is kind of silly.

I'll probably file an issue for us to donate a patch to them.

>I've added the Jetty reference to the Jetty9 documentation page in the 
>Shibboleth wiki under "Optional Configuration".

Thanks.

-- Scott

>