v2->v3 upgrade, localhost status redirect

[Baron Fujimoto]

I've encountered a new puzzle that has me stumped. It way well not even
be an idp issue, but I'm hoping the collective wisdom can provide some
insight.

Previously, I had successfully upgraded one of our test environment hosts
from v2 to v3. AFAICT, things are working as expected there. I'm now
trying to replicate that success with one of our spare production
environment hosts, per general upgrade recommendations (production
entityID, use as candidate for cloning to other produciton hosts, etc).
That also seems to be mostly successful, with one exception: the command
line status.sh doesn't work.

There are no errors that I've noted, just no output. Troubleshooting has
revealed that it appears to be generating an HTTP 302 redirect to the
https version of the GET. i.e.:

access.log:
127.0.0.1 - - [29/Jul/2016:14:30:50 -1000] "GET /idp/status HTTP/1.1" 302 - "-" "Java/1.8.0_102" 0 "-"

=====
$ telnet 127.0.0.1 80
Trying 127.0.0.1...
Connected to 127.0.0.1.
Escape character is '^]'.
GET /idp/status HTTP/1.1
host: 127.0.0.1

HTTP/1.1 302 Found
Server: Apache-Coyote/1.1
Cache-Control: private
Expires: Wed, 31 Dec 1969 14:00:00 HST
Location: https://127.0.0.1/idp/status
Content-Length: 0
Date: Sat, 30 Jul 2016 00:36:29 GMT
=====

However, this works if I access /status/idp via a browser (if I tell it
to ignore the SSL certificate name mismatch).

With my other test instance, I don't see any redirects.

=====
$ telnet 127.0.0.1 80
Trying 127.0.0.1...
Connected to 127.0.0.1.
Escape character is '^]'.
GET /idp/status HTTP/1.1
host: 127.0.0.1

HTTP/1.1 200 OK
Server: Apache-Coyote/1.1
Set-Cookie: JSESSIONID=2BD71E3A7DE9BE9BA9634CF1A490BA02; Path=/idp/; HttpOnly
Cache-Control: no-store
Content-Type: text/plain;charset=UTF-8
Content-Length: 1765
Date: Sat, 30 Jul 2016 00:46:49 GMT

[...status...]
=====

I'm using Tomcat 8.0.36 as my servlet container, and the configs between the
two hosts differ only by the IP addresses the connectors listen to and their
respective keystores.

Does anyone have any ideas as to what may be going on?

Aloha,
-baron
-- 
Baron Fujimoto <baron at hawaii.edu> :: UH Information Technology Services
minutas cantorum, minutas balorum, minutas carboratum desendus pantorum