<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
</head>
<body dir="auto">
<div>On Oct 1, 2012, at 3:47 PM, "Jayashree Ravi" <<a href="mailto:jravi123@hotmail.com">jravi123@hotmail.com</a>> wrote:</div>
<div><br>
</div>
<blockquote type="cite"><style><!--
.hmmessage P
{
margin:0px;
padding:0px
}
body.hmmessage
{
font-size: 12pt;
font-family:Calibri
}
--></style>
<div dir="ltr">
<div>2. We also have not enabled SSL between our loadbalancer and Apache/Shibboleth and we do have warning messages in shibd_warn.log </div>
</div>
</blockquote>
<div><br>
</div>
You are using SSL with the client, so there is no reason to use settings permitting http client access. The warnings are accurate and should be listened to if you allow only https access to your site. <br>
<div><br>
</div>
<div>-- Scott</div>
</body>
</html>