Handle HTTPS and HTTP to same IIS Web Site

[Boyd, Todd M.]

What is it you're trying to troubleshoot? If you're trying to get a look at the raw SAML then you could tweak the log levels to DEBUG for the SAML and encryption handlers as was suggested by Peter (I think?). This should show you the actual, un-encrypted XML that's being tossed around.


The configuration for this should be in the logback.xml configuration file.

________________________________
From: users <users-bounces at shibboleth.net> on behalf of Alexander F. French <Alexander.F.French at dartmouth.edu>
Sent: Tuesday, January 30, 2018 12:09:09 PM
To: Shib Users
Subject: RE: Handle HTTPS and HTTP to same IIS Web Site

Todd Boyd wrote:
> Telerik's Fiddler is capable of decrypting TLS traffic by importing a phony root certificate.

This is a good suggestion, and what I have done in the past. But details of our environment get in the way some for my specific cases.  I need to be on VPN to connect directly to a server (instead of through the load balancer).  But some of the details of our current VPN solution don't play nicely with Fiddler... and the work arounds I'm aware of to make it partly manageable don't seem to play well with the TLS decryption in Fiddler.  It becomes enough of a hassle that it isn't helping actually troubleshoot a problem.

Thanks for the suggestion,
Alex French
--
For Consortium Member technical support, see https://wiki.shibboleth.net/confluence/x/coFAAg
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net