<br><div class="gmail_quote">On Ubuntu using shibboleth 2.3.1 on apache2.2 when I visit:<div><br></div><div><a href="https://mydomain.com/Shibboleth.sso/Metadata" target="_blank">https://mydomain.com/Shibboleth.sso/Metadata</a></div>
<div><br></div><div>it appears that mod_shib is not intercepting the url, and I'm passed through to my (Rails Passenger) application, which of course responds that it can't find the file.</div>
<div><br></div><div>However, I am certain that mod_shib is installed and working, because when I visit my shibboleth-protected directory (/auth/shibboleth/) I get correctly redirected to the idp.</div><div><br></div><div>
My understanding (maybe wrong) is that mod_shib captures all traffic heading for /Shibboleth.sso/ and handles it.</div><div><br></div><div>I think (again maybe wrongly) that the directory name Shibboleth.sso is defined for shib 2.3.1 in the shibboleth2.xml file, with this line:</div>
<div><br></div><div><div><font face="courier new, monospace"><Sessions lifetime="28800" timeout="3600" checkAddress="false"</font></div><div><font face="courier new, monospace"> handlerURL="/Shibboleth.sso" handlerSSL="true"</font></div>
<div><font face="courier new, monospace"> exportLocation="<a href="http://localhost/Shibboleth.sso/GetAssertion" target="_blank">http://localhost/Shibboleth.sso/GetAssertion</a>" exportACL="127.0.0.1"</font></div>
<div><font face="courier new, monospace"> idpHistory="false" idpHistoryDays="7"></font></div></div><div><br></div><div>But it isn't working.</div><div><br></div><div><div>I've done one other installation, with shibboleth 2.5, and it eventually worked fine (on OSX) with a MUCH simpler shibboleth2.xml file.</div>
</div><div><br></div><div>I suspect that somehow Apache is masking the Shibboleth.sso directory from mod_shib, so it never gets handed over to shibd. (am I right?)</div><div><br></div><div>To further confirm the problem, w<span style="background-color:rgb(255,255,255);color:rgb(34,34,34);font-family:arial,sans-serif;font-size:13px">hen I log in to the idp, it replies with:</span></div>
<div><div style="color:rgb(34,34,34);font-family:arial,sans-serif;font-size:13px;background-color:rgb(255,255,255)"><br></div><div style="color:rgb(34,34,34);font-family:arial,sans-serif;font-size:13px;background-color:rgb(255,255,255)">
<span style="font-family:Times;font-size:medium">No peer endpoint available to which to send SAML response</span></div><div style="color:rgb(34,34,34);font-family:arial,sans-serif;font-size:13px;background-color:rgb(255,255,255)">
<br></div><div style="color:rgb(34,34,34);font-family:arial,sans-serif;font-size:13px;background-color:rgb(255,255,255)">I imagine this is because it can't find /Shibboleth.sso/ and the subdirectories shibd simulates, which the idp would normally interact with.</div>
</div><div><br></div><div><br></div><div><b>Things I've tried:</b></div><div>
<br></div><div>1. Lots of googling to see if others have had this problem. Not much out there.</div><div><br></div><div>2. Commenting out some apache conf lines that did Rewrites. Didn't help.</div><div><br></div><div>
3. Added a <Location> command to make sure /Shibboleth.sso/ was accessible. Didn't help.</div><div><br></div><div>Next I'm trying:</div><div><br></div><div>1. I'll strip down to a super bare-bones apache conf and see if something I've eliminated was the problem.</div>
<div><br></div><div>2. Doing a manual build of shib 2.5 on that machine and using my configuration that works on OSX (with appropriate adjustments of course)</div><div><br></div><div>But I don't have much hope.</div>
<div>
<br></div><div>Here is my shibboleth2.xml file:</div><div><br></div><div><div><font face="courier new, monospace"><SPConfig xmlns="urn:mace:shibboleth:2.0:native:sp:config"</font></div><div><font face="courier new, monospace"> xmlns:conf="urn:mace:shibboleth:2.0:native:sp:config"</font></div>
<div><font face="courier new, monospace"> xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion"</font></div><div><font face="courier new, monospace"> xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" </font></div>
<div><font face="courier new, monospace"> xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata"</font></div><div><font face="courier new, monospace"> logger="syslog.logger" clockSkew="180"></font></div>
<div><font face="courier new, monospace"><br></font></div><div><br></div><div><font face="courier new, monospace"> <OutOfProcess logger="shibd.logger"></font></div>
<div><br></div><div><font face="courier new, monospace"> </OutOfProcess></font></div>
<div><font face="courier new, monospace"> </font></div><div><font face="courier new, monospace"> <!-- The InProcess section conrains settings affecting web server modules/filters. --></font></div><div><font face="courier new, monospace"> <InProcess logger="native.logger"></font></div>
<div><font face="courier new, monospace"> <ISAPI normalizeRequest="true" safeHeaderNames="true"></font></div><div><br></div><div><font face="courier new, monospace"> <Site id="1" name="<a href="http://appsoma.com" target="_blank">appsoma.com</a>"/></font></div>
<div><br></div><div><font face="courier new, monospace"> </ISAPI></font></div><div><font face="courier new, monospace"> </InProcess></font></div>
<div><font face="courier new, monospace"><br></font></div><div><font face="courier new, monospace"> <!-- Only one listener can be defined, to connect in-process modules to shibd. --></font></div><div><font face="courier new, monospace"> <UnixListener address="shibd.sock"/></font></div>
<div><font face="courier new, monospace"> <!-- <TCPListener address="127.0.0.1" port="12345" acl="127.0.0.1"/> --></font></div><div><font face="courier new, monospace"> </font></div>
<div><font face="courier new, monospace"> <!-- This set of components stores sessions and other persistent data in daemon memory. --></font></div><div><font face="courier new, monospace"> <StorageService type="Memory" id="mem" cleanupInterval="900"/></font></div>
<div><font face="courier new, monospace"> <SessionCache type="StorageService" StorageService="mem" cacheTimeout="3600" inprocTimeout="900" cleanupInterval="900"/></font></div>
<div><font face="courier new, monospace"> <ReplayCache StorageService="mem"/></font></div><div><font face="courier new, monospace"> <ArtifactMap artifactTTL="180"/></font></div><div>
<br></div>
<div><font face="courier new, monospace"> <RequestMapper type="Native"></font></div><div><font face="courier new, monospace"> <RequestMap applicationId="default"></font></div><div>
<font face="courier new, monospace"> <Host name="<a href="http://appsoma.com" target="_blank">appsoma.com</a>"></font></div>
<div><font face="courier new, monospace"> <Path name="secure" authType="shibboleth" requireSession="true"/></font></div><div><font face="courier new, monospace"> </Host></font></div>
<div><font face="courier new, monospace"> </RequestMap></font></div><div><font face="courier new, monospace"> </RequestMapper></font></div><div><br></div><div><font face="courier new, monospace"> <ApplicationDefaults id="default" policyId="default"</font></div>
<div><font face="courier new, monospace"> entityID="<a href="https://appsoma.com/shibboleth" target="_blank">https://appsoma.com/shibboleth</a>"</font></div><div><font face="courier new, monospace"> REMOTE_USER="eppn persistent-id targeted-id"</font></div>
<div><font face="courier new, monospace"> signing="false" encryption="false"></font></div><div><font face="courier new, monospace"><br></font></div>
<div><font face="courier new, monospace"> <Sessions lifetime="28800" timeout="3600" checkAddress="false"</font></div><div><font face="courier new, monospace"> handlerURL="/Shibboleth.sso" handlerSSL="true"</font></div>
<div><font face="courier new, monospace"> exportLocation="<a href="http://localhost/Shibboleth.sso/GetAssertion" target="_blank">http://localhost/Shibboleth.sso/GetAssertion</a>" exportACL="127.0.0.1"</font></div>
<div><font face="courier new, monospace"> idpHistory="false" idpHistoryDays="7"></font></div><div><font face="courier new, monospace"> </font></div><div><font face="courier new, monospace"> <SessionInitiator type="Chaining" Location="/Login" isDefault="true" id="Intranet"</font></div>
<div><font face="courier new, monospace"> relayState="cookie" entityID="<a href="https://idp.its.utexas.edu/idp/shibboleth" target="_blank">https://idp.its.utexas.edu/idp/shibboleth</a>"></font></div>
<div><font face="courier new, monospace"> <SessionInitiator type="SAML2" acsIndex="1" template="bindingTemplate.html"/></font></div><div><font face="courier new, monospace"> <SessionInitiator type="Shib1" acsIndex="5"/></font></div>
<div><font face="courier new, monospace"> </SessionInitiator></font></div><div><br></div>
<div><font face="courier new, monospace"> <SessionInitiator type="Chaining" Location="/WAYF" id="WAYF" relayState="cookie"></font></div><div><font face="courier new, monospace"> <SessionInitiator type="SAML2" acsIndex="1" template="bindingTemplate.html"/></font></div>
<div><font face="courier new, monospace"> <SessionInitiator type="Shib1" acsIndex="5"/></font></div><div><font face="courier new, monospace"> <SessionInitiator type="WAYF" acsIndex="5" URL="<a href="https://wayf.example.org/WAYF" target="_blank">https://wayf.example.org/WAYF</a>"/></font></div>
<div><font face="courier new, monospace"> </SessionInitiator></font></div><div><br></div>
<div><font face="courier new, monospace"> <SessionInitiator type="Chaining" Location="/DS" id="DS" relayState="cookie"></font></div><div><font face="courier new, monospace"> <SessionInitiator type="SAML2" acsIndex="1" template="bindingTemplate.html"/></font></div>
<div><font face="courier new, monospace"> <SessionInitiator type="Shib1" acsIndex="5"/></font></div><div><font face="courier new, monospace"> <SessionInitiator type="SAMLDS" URL="<a href="https://ds.example.org/DS/WAYF" target="_blank">https://ds.example.org/DS/WAYF</a>"/></font></div>
<div><font face="courier new, monospace"> </SessionInitiator></font></div><div><br></div><div><font face="courier new, monospace"> <md:AssertionConsumerService Location="/SAML2/POST" index="1"</font></div>
<div><font face="courier new, monospace"> Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST"/></font></div><div><font face="courier new, monospace"> <md:AssertionConsumerService Location="/SAML2/POST-SimpleSign" index="2"</font></div>
<div><font face="courier new, monospace"> Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign"/></font></div><div><font face="courier new, monospace"> <md:AssertionConsumerService Location="/SAML2/Artifact" index="3"</font></div>
<div><font face="courier new, monospace"> Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact"/></font></div><div><font face="courier new, monospace"> <md:AssertionConsumerService Location="/SAML2/ECP" index="4"</font></div>
<div><font face="courier new, monospace"> Binding="urn:oasis:names:tc:SAML:2.0:bindings:PAOS"/></font></div><div><font face="courier new, monospace"> <md:AssertionConsumerService Location="/SAML/POST" index="5"</font></div>
<div><font face="courier new, monospace"> Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post"/></font></div><div><font face="courier new, monospace"> <md:AssertionConsumerService Location="/SAML/Artifact" index="6"</font></div>
<div><font face="courier new, monospace"> Binding="urn:oasis:names:tc:SAML:1.0:profiles:artifact-01"/></font></div><div><font face="courier new, monospace"><br></font></div><div><font face="courier new, monospace"> <!-- LogoutInitiators enable SP-initiated local or global/single logout of sessions. --></font></div>
<div><font face="courier new, monospace"> <LogoutInitiator type="Chaining" Location="/Logout" relayState="cookie"></font></div><div><font face="courier new, monospace"> <LogoutInitiator type="SAML2" template="bindingTemplate.html"/></font></div>
<div><font face="courier new, monospace"> <LogoutInitiator type="Local"/></font></div><div><font face="courier new, monospace"> </LogoutInitiator></font></div><div><font face="courier new, monospace"><br>
</font></div><div><font face="courier new, monospace"> <!-- md:SingleLogoutService locations handle single logout (SLO) protocol messages. --></font></div><div><font face="courier new, monospace"> <md:SingleLogoutService Location="/SLO/SOAP"</font></div>
<div><font face="courier new, monospace"> Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP"/></font></div><div><font face="courier new, monospace"> <md:SingleLogoutService Location="/SLO/Redirect" conf:template="bindingTemplate.html"</font></div>
<div><font face="courier new, monospace"> Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect"/></font></div><div><font face="courier new, monospace"> <md:SingleLogoutService Location="/SLO/POST" conf:template="bindingTemplate.html"</font></div>
<div><font face="courier new, monospace"> Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST"/></font></div><div><font face="courier new, monospace"> <md:SingleLogoutService Location="/SLO/Artifact" conf:template="bindingTemplate.html"</font></div>
<div><font face="courier new, monospace"> Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact"/></font></div><div><br></div>
<div><font face="courier new, monospace"> <md:ManageNameIDService Location="/NIM/SOAP"</font></div><div><font face="courier new, monospace"> Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP"/></font></div>
<div><font face="courier new, monospace"> <md:ManageNameIDService Location="/NIM/Redirect" conf:template="bindingTemplate.html"</font></div><div><font face="courier new, monospace"> Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect"/></font></div>
<div><font face="courier new, monospace"> <md:ManageNameIDService Location="/NIM/POST" conf:template="bindingTemplate.html"</font></div><div><font face="courier new, monospace"> Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST"/></font></div>
<div><font face="courier new, monospace"> <md:ManageNameIDService Location="/NIM/Artifact" conf:template="bindingTemplate.html"</font></div><div><font face="courier new, monospace"> Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact"/></font></div>
<div><br></div><div><font face="courier new, monospace"> <md:ArtifactResolutionService Location="/Artifact/SOAP" index="1"</font></div>
<div><font face="courier new, monospace"> Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP"/></font></div><div><font face="courier new, monospace"><br></font></div><div><br></div>
<div><font face="courier new, monospace"> <Handler type="MetadataGenerator" Location="/Metadata" signing="false"/></font></div><div><font face="courier new, monospace"><br></font></div>
<div><font face="courier new, monospace"> <!-- Status reporting service. --></font></div><div><font face="courier new, monospace"> <Handler type="Status" Location="/Status" acl="127.0.0.1"/></font></div>
<div><font face="courier new, monospace"><br></font></div><div><font face="courier new, monospace"> <!-- Session diagnostic service. --></font></div><div><font face="courier new, monospace"> <Handler type="Session" Location="/Session" showAttributeValues="false"/></font></div>
<div><font face="courier new, monospace"><br></font></div><div><font face="courier new, monospace"> </Sessions></font></div><div><br></div><div><font face="courier new, monospace"> <Errors supportContact="<a href="mailto:ken.demarest@gmail.com" target="_blank">ken.demarest@gmail.com</a>"</font></div>
<div><font face="courier new, monospace"> logoLocation="/shibboleth-sp/logo.jpg"</font></div><div><font face="courier new, monospace"> styleSheet="/shibboleth-sp/main.css"/></font></div>
<div><font face="courier new, monospace"><br></font></div><div><font face="courier new, monospace"> <!-- Chains together all your metadata sources. --></font></div><div><font face="courier new, monospace"> <MetadataProvider type="Chaining"></font></div>
<div><font face="courier new, monospace"> <!-- Example of remotely supplied batch of signed metadata. --></font></div><div><font face="courier new, monospace"> </font></div><div><font face="courier new, monospace"> <MetadataProvider type="XML" backingFilePath="/etc/shibboleth/UTfed-metadata.xml" uri="<a href="https://idm.utsystem.edu/downloads/UTfed-metadata.xml" target="_blank">https://idm.utsystem.edu/downloads/UTfed-metadata.xml</a>" reloadInterval="7200"></font></div>
<div><font face="courier new, monospace"><!-- <MetadataFilter type="RequireValidUntil" maxValidityInterval="2419200"/> --></font></div><div><font face="courier new, monospace"><!-- <MetadataFilter type="Signature" certificate="fedsigner.pem"/> --></font></div>
<div><font face="courier new, monospace"> </MetadataProvider></font></div><div><br></div><div><font face="courier new, monospace"> </MetadataProvider></font></div><div><font face="courier new, monospace"><br>
</font></div><div>
<font face="courier new, monospace"> <!-- Chain the two built-in trust engines together. --></font></div><div><font face="courier new, monospace"> <TrustEngine type="Chaining"></font></div>
<div><font face="courier new, monospace"> <TrustEngine type="ExplicitKey"/></font></div><div><font face="courier new, monospace"> <TrustEngine type="PKIX"/></font></div>
<div><font face="courier new, monospace"> </TrustEngine></font></div><div><font face="courier new, monospace"><br></font></div><div><font face="courier new, monospace"> <!-- Map to extract attributes from SAML assertions. --></font></div>
<div><font face="courier new, monospace"> <AttributeExtractor type="XML" validate="true" path="attribute-map.xml"/></font></div><div><font face="courier new, monospace"> </font></div>
<div><font face="courier new, monospace"> <!-- Use a SAML query if no attributes are supplied during SSO. --></font></div><div><font face="courier new, monospace"> <AttributeResolver type="Query" subjectMatch="true"/></font></div>
<div><font face="courier new, monospace"><br></font></div><div><font face="courier new, monospace"> <!-- Default filtering policy for recognized attributes, lets other data pass. --></font></div><div><font face="courier new, monospace"> <AttributeFilter type="XML" validate="true" path="attribute-policy.xml"/></font></div>
<div><font face="courier new, monospace"><br></font></div><div><font face="courier new, monospace"> <!-- Simple file-based resolver for using a single keypair. --></font></div><div><font face="courier new, monospace"> <CredentialResolver type="File" key="sp-key.pem" certificate="sp-cert.pem"/></font></div>
<div><font face="courier new, monospace"><br></font></div><div><font face="courier new, monospace"> <!-- Example of a second application (using a second vhost) that has a different entityID. --></font></div>
<div>
<font face="courier new, monospace"> <!-- <ApplicationOverride id="admin" entityID="<a href="https://admin.example.org/shibboleth" target="_blank">https://admin.example.org/shibboleth</a>"/> --></font></div>
<div><font face="courier new, monospace"><br></font></div><div><font face="courier new, monospace"> </ApplicationDefaults></font></div><div><font face="courier new, monospace"> </font></div><div><br></div>
<div><font face="courier new, monospace"> <SecurityPolicies></font></div><div><br></div><div><font face="courier new, monospace"> <Policy id="default" validate="false"></font></div>
<div><font face="courier new, monospace"> <PolicyRule type="MessageFlow" checkReplay="true" expires="60"/></font></div><div><font face="courier new, monospace"> <PolicyRule type="Conditions"></font></div>
<div><font face="courier new, monospace"> <PolicyRule type="Audience"/></font></div><div><font face="courier new, monospace"> <!-- Enable Delegation rule to permit delegated access. --></font></div>
<div><font face="courier new, monospace"> <!-- <PolicyRule type="Delegation"/> --></font></div><div><font face="courier new, monospace"> </PolicyRule></font></div><div>
<font face="courier new, monospace"> <PolicyRule type="ClientCertAuth" errorFatal="true"/></font></div><div><font face="courier new, monospace"> <PolicyRule type="XMLSigning" errorFatal="true"/></font></div>
<div><font face="courier new, monospace"> <PolicyRule type="SimpleSigning" errorFatal="true"/></font></div><div><font face="courier new, monospace"> </Policy></font></div>
<div><font face="courier new, monospace"> </SecurityPolicies></font></div><div><font face="courier new, monospace"><br></font></div><div><font face="courier new, monospace"></SPConfig></font></div></div><div>
<br></div><div>And here is the relevant part of the apache configuration:</div><div><br></div><div><div><font face="courier new, monospace"><IfModule mod_ssl.c></font></div><div><font face="courier new, monospace"><VirtualHost _default_:443></font></div>
<div><font face="courier new, monospace"><br></font></div><div><font face="courier new, monospace"><span style="white-space:pre-wrap"> </span>ErrorDocument 503 /503.html</font></div><div><font face="courier new, monospace"><span style="white-space:pre-wrap"> </span>RewriteEngine on</font></div>
<div><font face="courier new, monospace"><span style="white-space:pre-wrap"> </span>RewriteCond %{DOCUMENT_ROOT}/../tmp/stop.txt -f</font></div><div><font face="courier new, monospace"><span style="white-space:pre-wrap"> </span>RewriteCond %{DOCUMENT_ROOT}/${REQUEST_FILENAME} !-f</font></div>
<div><font face="courier new, monospace"><span style="white-space:pre-wrap"> </span>RewriteRule ^(.*)$ /$1 [R=503,L]</font></div><div><font face="courier new, monospace"><br></font></div><div><font face="courier new, monospace"><span style="white-space:pre-wrap"> </span>ServerName <a href="http://www.appsoma.com" target="_blank">www.appsoma.com</a></font></div>
<div><font face="courier new, monospace"><span style="white-space:pre-wrap"> </span>DocumentRoot /webapps/hsc/current/public</font></div><div><font face="courier new, monospace"><span style="white-space:pre-wrap"> </span><Directory /webapps/hsc/current/public></font></div>
<div><font face="courier new, monospace"><span style="white-space:pre-wrap"> </span>Allow from all</font></div><div><font face="courier new, monospace"><span style="white-space:pre-wrap"> </span>Options -MultiViews</font></div>
<div><font face="courier new, monospace"><span style="white-space:pre-wrap"> </span></Directory></font></div><div><font face="courier new, monospace"><br></font></div><div><font face="courier new, monospace"><span style="white-space:pre-wrap"> </span><Location /auth/shibboleth/callback></font></div>
<div><font face="courier new, monospace"><span style="white-space:pre-wrap"> </span># this Location directive is what redirects apache over to the IdP.</font></div><div><font face="courier new, monospace"><span style="white-space:pre-wrap"> </span>AuthType shibboleth</font></div>
<div><font face="courier new, monospace"><span style="white-space:pre-wrap"> </span>ShibRequestSetting requireSession 1</font></div><div><font face="courier new, monospace"><span style="white-space:pre-wrap"> </span>require valid-user</font></div>
<div><font face="courier new, monospace"><span style="white-space:pre-wrap"> </span></Location></font></div><div><font face="courier new, monospace"><br></font></div><div><font face="courier new, monospace"><span style="white-space:pre-wrap"> </span><Location /Shibboleth.sso></font></div>
<div><font face="courier new, monospace"><span style="white-space:pre-wrap"> </span>Satisfy Any</font></div><div><font face="courier new, monospace"><span style="white-space:pre-wrap"> </span>Allow from all</font></div>
<div><font face="courier new, monospace"><span style="white-space:pre-wrap"> </span>AuthType None</font></div><div><font face="courier new, monospace"><span style="white-space:pre-wrap"> </span>Require all granted</font></div>
<div><font face="courier new, monospace"><span style="white-space:pre-wrap"> </span></Location></font></div><div><font face="courier new, monospace"><br></font></div><div><font face="courier new, monospace"><span style="white-space:pre-wrap"> </span>ErrorLog ${APACHE_LOG_DIR}/error.log</font></div>
<div><font face="courier new, monospace"><br></font></div><div><font face="courier new, monospace"><span style="white-space:pre-wrap"> </span>LogLevel warn</font></div><div><font face="courier new, monospace"><br>
</font></div><div><font face="courier new, monospace"><span style="white-space:pre-wrap"> </span>CustomLog ${APACHE_LOG_DIR}/access.log combined</font></div><div><font face="courier new, monospace"><br></font></div>
<div><font face="courier new, monospace"><span style="white-space:pre-wrap"> </span>SSLEngine on</font></div><div><font face="courier new, monospace"><br></font></div><div><font face="courier new, monospace"><span style="white-space:pre-wrap"> </span>SSLCertificateFile /etc/apache2/ssl/appsoma.com.crt</font></div>
<div><font face="courier new, monospace"><span style="white-space:pre-wrap"> </span>SSLCertificateKeyFile /etc/apache2/ssl/appsoma.com.key</font></div><div><font face="courier new, monospace"><br></font></div>
<div><font face="courier new, monospace"><span style="white-space:pre-wrap"> </span><FilesMatch "\.(cgi|shtml|phtml|php)$"></font></div><div><font face="courier new, monospace"><span style="white-space:pre-wrap"> </span>SSLOptions +StdEnvVars</font></div>
<div><font face="courier new, monospace"><span style="white-space:pre-wrap"> </span></FilesMatch></font></div><div><font face="courier new, monospace"><span style="white-space:pre-wrap"> </span><Directory /usr/lib/cgi-bin></font></div>
<div><font face="courier new, monospace"><span style="white-space:pre-wrap"> </span>SSLOptions +StdEnvVars</font></div><div><font face="courier new, monospace"><span style="white-space:pre-wrap"> </span></Directory></font></div>
<div><font face="courier new, monospace"><br></font></div><div><font face="courier new, monospace"><span style="white-space:pre-wrap"> </span>BrowserMatch "MSIE [2-6]" \</font></div><div><font face="courier new, monospace"><span style="white-space:pre-wrap"> </span>nokeepalive ssl-unclean-shutdown \</font></div>
<div><font face="courier new, monospace"><span style="white-space:pre-wrap"> </span>downgrade-1.0 force-response-1.0</font></div><div><font face="courier new, monospace"><span style="white-space:pre-wrap"> </span># MSIE 7 and newer should be able to use keepalive</font></div>
<div><font face="courier new, monospace"><span style="white-space:pre-wrap"> </span>BrowserMatch "MSIE [17-9]" ssl-unclean-shutdown</font></div><div><font face="courier new, monospace"><br></font></div>
<div><font face="courier new, monospace"></VirtualHost></font></div><div><font face="courier new, monospace"></IfModule></font></div></div><div><br></div><div>Any and all help is much appreciated!!</div><span class="HOEnZb"><font color="#888888"><div>
<br>
</div><div>Ken Demarest</div><div><br></div><div><br></div><div><br></div>
</font></span></div><br><br clear="all"><div><br></div>-- <br><div><span style="color:rgb(128,128,128);font-family:Arial,sans-serif;font-size:5px">______________________________</span><span style="color:rgb(128,128,128);font-family:Arial,sans-serif;font-size:5px">______________________________</span><span style="color:rgb(128,128,128);font-family:Arial,sans-serif;font-size:5px">______________________</span><span style="font-size:3pt;font-family:Arial,sans-serif;color:gray"><br>
</span><b><span style="font-size:9pt;font-family:Arial,sans-serif;color:gray">Ken Demarest </span></b><span style="font-size:8pt;font-family:Arial,sans-serif;color:gray"><br>Founder and President <br></span><b><span style="font-size:8pt;font-family:Arial,sans-serif"><font color="#66cccc">JEESTY ENDEAVOR [ j. ]</font></span></b></div>
<span style="font-size:8pt;font-family:Arial,sans-serif;color:gray"><a href="mailto:ken.demarest@gmail.com" target="_blank">ken.demarest@gmail.com</a></span><div><span style="font-size:8pt;font-family:Arial,sans-serif;color:gray">415.342.9731<br>
Austin, Texas ▪ United States </span><span style="font-size:4pt;font-family:Arial,sans-serif;color:gray"><br>__________________________________________________________________________________</span></div><br>