<html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class="">Hello everybody,<div class=""><br class=""></div><div class="">I am having trouble to use reverse-proxy with Shibboleth IDP.</div><div class="">Let me give some details:</div><div class=""><br class=""></div><div class="">I have a server with bunch of dockers — a docker for reverse proxy with NGINX, a docker for Shibboleth SP and Shibboleth IDP. SP is served over <a href="http://sp.example.com" class="">sp.example.com</a> and IDP is served over <a href="http://idp.example.com" class="">idp.example.com</a>. Both URLs have valid SSL certificate from Let’s encrypt.</div><div class=""><br class=""></div><div class="">SP works perfectly fine. However, I am having trouble for the IDP.</div><div class="">Whenever I go to, <a href="http://idp.example.com" class="">idp.example.com</a>, Chrome gives <span style="color: rgb(100, 100, 100); font-size: 0.8em; text-transform: uppercase; font-family: system-ui, sans-serif; orphans: 2; widows: 2; background-color: rgb(255, 255, 255);" class="">ERR_INVALID_RESPONSE</span></div><div class="">When I try with Safari, it downloads a single file — and that file includes a single letter “P”. Weird, right?</div><div class=""><br class=""></div><div class="">I go through logs of both Shibboleth IDP and NGINX. The IDP logs doesn’t show any error. However, NGINX shows the error below:</div><div class=""><br class=""></div><div class=""><div style="margin: 0px; font-stretch: normal; font-size: 11px; line-height: normal; font-family: Menlo; color: rgb(195, 55, 32); background-color: rgb(255, 255, 255);" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""><b class="">upstream sent no valid HTTP/1.0 header while reading response header from upstream</b></span></div></div><div style="margin: 0px; font-stretch: normal; font-size: 11px; line-height: normal; font-family: Menlo; color: rgb(195, 55, 32); background-color: rgb(255, 255, 255);" class=""><br class=""></div><div class=""><br class=""></div><div class="">It looks like Tomcat or Jetty in iDP container doesn’t return a proper HTTP header — or response? </div><div class=""><br class=""></div><div class="">I searched through this error. However, I didn’t get anywhere. Does anyone have an idea?</div><div class=""><br class=""></div></body></html>