<div dir="ltr"><div>Hi, </div><div><br></div><div>I use shibboleth 2.5.3 with NGINX + FastCGI. </div><div><br></div><div>I’m working on infrastructure refactoring and trying to put the NGINX behind AWS ELB, and let ELB terminate SSL. </div><div><br></div><div>I encountered “FastCGI Shibboleth responder should only be used for Shibboleth protocol requests.” error message, and </div><div>I interpreted it complains as the request is converted from https to http and passed into ShibbolethResponder, which expects SSL</div><div>according to <a href="https://github.com/craigpg/shibboleth-sp2/blob/f62a7996e195a9c026f3f8cb0e9086594b7f8515/shibsp/ServiceProvider.cpp#L486">https://github.com/craigpg/shibboleth-sp2/blob/f62a7996e195a9c026f3f8cb0e9086594b7f8515/shibsp/ServiceProvider.cpp#L486</a>. </div><div><br></div><div>What I’m looking for is the workaround described the page below for NGINX+FastCGI. </div><div><a href="https://wiki.shibboleth.net/confluence/display/SHIB/SPNoSSL">https://wiki.shibboleth.net/confluence/display/SHIB/SPNoSSL</a> (I expect this is still relevant for Shib 2)</div><div><br></div><div>Here is the current configuration for shibresponder I use currently (with SSL on). </div><div><br></div><div><div> <font face="monospace, monospace">   # FastCGI responder</font></div><div><font face="monospace, monospace">    location /saml {</font></div><div><font face="monospace, monospace">        include fastcgi_params;</font></div><div><font face="monospace, monospace">        fastcgi_param  HTTPS on;</font></div><div><font face="monospace, monospace">        fastcgi_param  SERVER_PORT 443;</font></div><div><font face="monospace, monospace">        fastcgi_param  SERVER_PROTOCOL https;</font></div><div><font face="monospace, monospace">        fastcgi_param  X_FORWARDED_PROTO https;</font></div><div><font face="monospace, monospace">        fastcgi_param  X_FORWARDED_PORT 443;</font></div><div><font face="monospace, monospace">        fastcgi_pass unix:/tmp/shibresponder.sock;</font></div><div><font face="monospace, monospace">    }</font></div></div><div><br></div><div>Thanks, </div><div><br clear="all"><div><div class="gmail_signature"><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div><span><div dir="ltr" style="margin-left:0pt"><table style="border:none;border-collapse:collapse"><colgroup><col width="311"><col width="313"></colgroup><tbody><tr style="height:0px"><td style="border:1px solid rgb(255,255,255);vertical-align:top;padding:7px"><p dir="ltr" style="line-height:1.2;margin-top:0pt;margin-bottom:0pt"><span style="font-size:14.666666666666666px;background-color:transparent;vertical-align:baseline;white-space:pre-wrap"><font face="arial, helvetica, sans-serif" color="#0b5394"><b>Kenji Nakamura</b></font></span></p><p dir="ltr" style="line-height:1.2;margin-top:0pt;margin-bottom:0pt"><span style="color:rgb(0,0,0);background-color:transparent;vertical-align:baseline;white-space:pre-wrap"><font face="arial, helvetica, sans-serif" size="2">Founder, Signifier, Inc.</font></span></p></td><td style="border:1px solid rgb(255,255,255);vertical-align:top;padding:7px"><p dir="ltr" style="line-height:1.2;margin-top:0pt;margin-bottom:0pt"><span style="font-size:14.666666666666666px;background-color:transparent;vertical-align:baseline;white-space:pre-wrap"><font face="arial, helvetica, sans-serif" color="#0b5394"><b>中村 研二</b></font></span></p><p dir="ltr" style="line-height:1.2;margin-top:0pt;margin-bottom:0pt"><span style="color:rgb(0,0,0);background-color:transparent;vertical-align:baseline;white-space:pre-wrap"><font face="arial, helvetica, sans-serif" size="2">株式会社シグニファイア 代表取締役</font></span></p></td></tr><tr style="height:0px"><td style="border:1px solid rgb(255,255,255);vertical-align:top;padding:7px"><p dir="ltr" style="line-height:1.2;margin-top:0pt;margin-bottom:0pt"><span style="color:rgb(0,0,0);background-color:transparent;vertical-align:baseline;white-space:pre-wrap"><font face="arial, helvetica, sans-serif" size="1">4-10-1 Nakano</font></span></p><p dir="ltr" style="line-height:1.2;margin-top:0pt;margin-bottom:0pt"><span style="color:rgb(0,0,0);background-color:transparent;vertical-align:baseline;white-space:pre-wrap"><font face="arial, helvetica, sans-serif" size="1">Nakano Central Park East 1F ICTCO #23</font></span></p><p dir="ltr" style="line-height:1.2;margin-top:0pt;margin-bottom:0pt"><span style="color:rgb(0,0,0);background-color:transparent;vertical-align:baseline;white-space:pre-wrap"><font face="arial, helvetica, sans-serif" size="1">Nakano, Tokyo, Japan 164-0001</font></span></p></td><td style="border:1px solid rgb(255,255,255);vertical-align:top;padding:7px"><p dir="ltr" style="line-height:1.2;margin-top:0pt;margin-bottom:0pt"><span style="color:rgb(0,0,0);background-color:transparent;vertical-align:baseline;white-space:pre-wrap"><font face="arial, helvetica, sans-serif" size="1">〒164-0001</font></span></p><p dir="ltr" style="line-height:1.2;margin-top:0pt;margin-bottom:0pt"><span style="color:rgb(0,0,0);background-color:transparent;vertical-align:baseline;white-space:pre-wrap"><font face="arial, helvetica, sans-serif" size="1">東京都中野区中野4-10-1</font></span></p><p dir="ltr" style="line-height:1.2;margin-top:0pt;margin-bottom:0pt"><span style="color:rgb(0,0,0);background-color:transparent;vertical-align:baseline;white-space:pre-wrap"><font face="arial, helvetica, sans-serif" size="1">中野セントラルパークイースト1F ICTCO 23</font></span></p></td></tr><tr style="height:0px"><td style="border:1px solid rgb(255,255,255);vertical-align:top;padding:7px"><p dir="ltr" style="line-height:1.2;margin-top:0pt;margin-bottom:0pt"><span style="color:rgb(0,0,0);background-color:transparent;vertical-align:baseline;white-space:pre-wrap"><font face="arial, helvetica, sans-serif" size="1">Phone:           +1-415-691-6297</font></span></p><p dir="ltr" style="line-height:1.2;margin-top:0pt;margin-bottom:0pt"><span style="color:rgb(0,0,0);background-color:transparent;vertical-align:baseline;white-space:pre-wrap"><font face="arial, helvetica, sans-serif" size="1">Conf. Bridge: +1-401-283-2974</font></span></p><font face="arial, helvetica, sans-serif" size="1"><br></font></td><td style="border:1px solid rgb(255,255,255);vertical-align:top;padding:7px"><p dir="ltr" style="line-height:1.2;margin-top:0pt;margin-bottom:0pt"><span style="color:rgb(0,0,0);background-color:transparent;vertical-align:baseline;white-space:pre-wrap"><font face="arial, helvetica, sans-serif" size="1">電話: 03-5356-7524</font></span></p><p dir="ltr" style="line-height:1.2;margin-top:0pt;margin-bottom:0pt"><span style="color:rgb(0,0,0);background-color:transparent;vertical-align:baseline;white-space:pre-wrap"><font face="arial, helvetica, sans-serif" size="1">携帯: 080-9994-5623</font></span></p><p dir="ltr" style="line-height:1.2;margin-top:0pt;margin-bottom:0pt"><span style="color:rgb(0,0,0);background-color:transparent;vertical-align:baseline;white-space:pre-wrap"><font face="arial, helvetica, sans-serif" size="1">FAX:  03-5539-4511  </font></span></p></td></tr><tr style="height:28px"><td colspan="2" style="border-style:solid;border-color:rgb(255,255,255) rgb(0,0,0) rgb(255,255,255) rgb(255,255,255);border-width:1px;vertical-align:top;padding:7px"><span><font size="1"><p dir="ltr" style="line-height:1.2;margin-top:0pt;margin-bottom:0pt"><span style="color:rgb(0,0,0);background-color:transparent;vertical-align:baseline;white-space:pre-wrap"><font face="arial, helvetica, sans-serif">URL:                  </font><a href="http://signifier.jp" target="_blank"><font face="monospace, monospace">http://signifier.jp</font></a></span></p><p dir="ltr" style="line-height:1.2;margin-top:0pt;margin-bottom:0pt"><span style="color:rgb(0,0,0);background-color:transparent;vertical-align:baseline;white-space:pre-wrap"><font face="arial, helvetica, sans-serif">Twitter:            </font><font face="monospace, monospace"> @k2nakamura </font></span></p><p dir="ltr" style="line-height:1.2;margin-top:0pt;margin-bottom:0pt"><span style="color:rgb(0,0,0);background-color:transparent;vertical-align:baseline;white-space:pre-wrap"><font face="arial, helvetica, sans-serif">Skype:               </font><font face="monospace, monospace">kenji_signifier</font></span></p><span style="font-family:arial,helvetica,sans-serif;color:rgb(0,0,0);background-color:transparent;vertical-align:baseline;white-space:pre-wrap">Conf. Bridge:   </span><span style="color:rgb(0,0,0);background-color:transparent;vertical-align:baseline;white-space:pre-wrap"><font face="monospace, monospace"> <a href="http://www.uberconference.com/kenji_signifier" target="_blank">http://www.uberconference.com/kenji_signifier</a></font></span></font></span><p dir="ltr" style="line-height:1.2;margin-top:0pt;margin-bottom:0pt"></p></td></tr></tbody></table></div></span></div><div><br></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div>
</div></div>