IdP 3: error on SAML 1 AttributeQuery

[Cantor, Scott]

On 3/18/15, 3:53 PM, "Sara Hopkins" <sara.hopkins at ed.ac.uk> wrote:
>
>The reason why I said that "it seems" to be the default for the SSL 
>module is because the string "# jetty.ssl.wantClientAuth=true" is in the 
>ssl.mod file that appeared as a result of my enabling the SSL module. I 
>can't see how the installation of the plug-in for supporting SOAP 
>endpoints (I assume that is the special plug-in you referred to in an 
>earlier email) would affect that. (But perhaps you meant a different 
>plug-in)

No, the plugin hardcodes the property to true. It's a subclass of the same class in Jetty that would normally take that option, but it's manually set to true in the code of the subclass because its only purpose is to support that use case. It just avoids somebody accidentally breaking things. So the most likely reason for the cert not showing up is if that plugin isn't configured, or if the option is being set to false in the config (that might override what the code does).

Or it's just not Jetty alone, it's Jetty behind something else, Apache, load balancer, whatever.

-- Scott