Using SRPM method to install Shibboleth on Amazon EC2 ...

[Cantor, Scott]

On 3/13/15, 9:43 AM, "Peter Schober" <peter.schober at univie.ac.at> wrote:
>
>> 2015-03-13 13:17:51 WARN Shibboleth.Application : handlerSSL should be
>> enabled for SSL/TLS-enabled web sites
>
>I wonder why this is still the default (do people actually deploy the
>SP on HTTP-only sites? And do we need to cater to those?), but just
>set handlerSSL="true" if you have HTTPS on that service at all.

It's an "I don't want to handle all the dumb questions from people trying to run it over http" thing. People test that way a lot, yes, particularly when they are beginners and exactly the sort to not understand any of it and waste list time asking.

-- Scott