<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<style type="text/css" style="display:none;"><!-- P {margin-top:0;margin-bottom:0;} --></style>
</head>
<body dir="ltr">
<div id="divtagdefaultwrapper" style="font-size:11pt;color:#000000;font-family:Calibri,Helvetica,sans-serif;" dir="ltr">
<p>Michael,</p>
<p><br>
</p>
<p>You can find the main wiki for all Shibboleth project documentation here: <a href="https://wiki.shibboleth.net/" class="OWAAutoLink" id="LPlnk243254" previewremoved="true">
https://wiki.shibboleth.net/</a></p>
<p><br>
</p>
<p>The page you are interested in (as Scott described) can be found here: <a href="https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPISAPI" class="OWAAutoLink" id="LPlnk458896" previewremoved="true">https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPISAPI</a></p>
<p><br>
</p>
<p>Best,</p>
<p>Michael</p>
<br>
</div>
<hr style="display:inline-block;width:98%" tabindex="-1">
<div id="divRplyFwdMsg" dir="ltr"><font face="Calibri, sans-serif" style="font-size:11pt" color="#000000"><b>From:</b> users <users-bounces@shibboleth.net> on behalf of Boyd, Todd M. <tmboyd1@ccis.edu><br>
<b>Sent:</b> Monday, November 20, 2017 2:27:00 PM<br>
<b>To:</b> Shib Users<br>
<b>Subject:</b> RE: Moving SSL cert to the edge breaks Shibboleth</font>
<div> </div>
</div>
<div class="BodyFragment"><font size="2"><span style="font-size:10pt;">
<div class="PlainText">Could you potentially lie to the stack that sits on IIS using something like IIS URL Rewrite and replacing server variables? I know there were a few small web applications running on IIS we were able to "trick" this way by setting things
such as the HTTPS, SERVER_PORT, SERVER_PORT_SECURE, etc. variables.<br>
<br>
<br>
-Todd<br>
<br>
<br>
-----Original Message-----<br>
From: users [<a href="mailto:users-bounces@shibboleth.net">mailto:users-bounces@shibboleth.net</a>] On Behalf Of Cantor, Scott<br>
Sent: Monday, November 20, 2017 2:22 PM<br>
To: Shib Users <users@shibboleth.net><br>
Subject: RE: Moving SSL cert to the edge breaks Shibboleth<br>
<br>
> Can you help me understand (or link to a doc that does)?<br>
<br>
If you're asking me to explain how web server virtualization works, I guess I would suggest you read the Apache ServerName documentation, I don't know of any particularly good source on the basics of web server deployment. If you're talking about the SP workaround,
it's under NativeSPISAPI in the wiki.<br>
<br>
> We've been using Shibboleth for months successfully. We haven't <br>
> changed any names - only moved the cert.<br>
<br>
That cannot break it. You changed the virtualization of the site, you had to have. I would imagine it was physically https before and now it's physically http and still logically https. So you MUST tell the web server that it is in fact logically running on
https. Which you cannot do, IIS doesn't support that, but you can hack it by telling the SP that in the <Site> element that's already present, using the scheme attribute.<br>
<br>
-- Scott<br>
<br>
--<br>
For Consortium Member technical support, see <a href="https://wiki.shibboleth.net/confluence/x/coFAAg">
https://wiki.shibboleth.net/confluence/x/coFAAg</a><br>
To unsubscribe from this list send an email to users-unsubscribe@shibboleth.net<br>
-- <br>
For Consortium Member technical support, see <a href="https://wiki.shibboleth.net/confluence/x/coFAAg">
https://wiki.shibboleth.net/confluence/x/coFAAg</a><br>
To unsubscribe from this list send an email to users-unsubscribe@shibboleth.net<br>
</div>
</span></font></div>
</body>
</html>