NGINX+FastCGI Shibresponder behind load balance with SSL termination

[Peter Schober]

* Kenji Nakamura <kenji at signifier.jp> [2017-03-23 05:35]:
> according to
> https://github.com/craigpg/shibboleth-sp2/blob/f62a7996e195a9c026f3f8cb0e9086594b7f8515/shibsp/ServiceProvider.cpp#L486

Just two general comments regarding that repository:

# Description: "shibboleth-sp2 mirror from debian/ubuntu"

So not sources from the Shibboleth project. Use this instead:
https://wiki.shibboleth.net/confluence/display/DEV/Source+Code+Access
The SP is here: https://git.shibboleth.net/view/?p=cpp-sp.git;a=tree

# Commits: "Latest commit on 24 Aug 2010".

So not only is this not the official code (not even a mirror thereof),
but it's also quite severly out of date.

Cheers,
-peter