Moving SSL cert to the edge breaks Shibboleth

Cantor, Scott cantor.2 at osu.edu
Mon Nov 20 15:31:07 EST 2017


> Could you potentially lie to the stack that sits on IIS using something like IIS
> URL Rewrite and replacing server variables? I know there were a few small
> web applications running on IIS we were able to "trick" this way by setting
> things such as the HTTPS, SERVER_PORT, SERVER_PORT_SECURE, etc.
> variables.

Very likely, that's probably the actual "fix" on newer versions. My knowledge tends to be extremely dated to older versions pre-IIS7.

We'll take a look at that for the new version, I'd love to be able to pull the workaround code if there's a proper way to do it now. All we're doing now is subverting the logic that reads from those variables, obviously.

-- Scott



More information about the users mailing list