...
The Shibboleth module needs to be informed that the information it's receiving from the web server has been altered by the deployment environment to handle SSL load balancers/accelerators properly. This can be done for Apache by specifying
- Apache httpd: For older versions of Apache httpd (up to 2.0) you can specify
ShibURLScheme https
within the appropriate<VirtualHost>
inhttpd.conf
. For current releases (from httpd 2.1 on) the scheme is given as part of theServerName
directive, e.g.Code Block ServerName https://sptest.tut.fi:443 UseCanonicalName On
- For IIS, this must be specified directly in
shibboleth.xml
by modifying the<Site>
element:Code Block xml xml <Implementation> <ISAPI normalizeRequest="true"> <Site id="1" name="sptest.tut.fi" scheme="https"/> </ISAPI> </Implementation>