diff options
| author | Nathan Kinder <nkinder@redhat.com> | 2015-03-09 20:28:47 -0700 |
|---|---|---|
| committer | Rob Crittenden <rcritten@redhat.com> | 2015-03-10 18:24:01 -0400 |
| commit | 42700be962e245243f10c30a29c41fcda1f3f712 (patch) | |
| tree | 08c2fb51959ad9f59866695517247963abda1a1f /ipsilon | |
| parent | e0aa4f23846fa9f6bb0fb9eb021e930b035100eb (diff) | |
| download | ipsilon-42700be962e245243f10c30a29c41fcda1f3f712.tar.gz ipsilon-42700be962e245243f10c30a29c41fcda1f3f712.tar.xz ipsilon-42700be962e245243f10c30a29c41fcda1f3f712.zip | |
Require SSL on SP when using --saml-secure-setup
If ipsilon-client-install is used with the --saml-secure-setup
option (which is set by default), only https connections will
work for authentication. We are not setting the SSLRequireSSL
directive though, so we set mellon up to fail.
This patch adds the SSLRequireSSL directive to the SP config
when --saml-secure-setup is specified. In addition, we add a
rewrite rule to rewrite http requests to https for the SP.
https://fedorahosted.org/ipsilon/ticket/80
Signed-off-by: Nathan Kinder <nkinder@redhat.com>
Reviewed-by: Rob Crittenden <rcritten@redhat.com>
Diffstat (limited to 'ipsilon')
| -rwxr-xr-x | ipsilon/install/ipsilon-client-install | 7 |
1 files changed, 7 insertions, 0 deletions
diff --git a/ipsilon/install/ipsilon-client-install b/ipsilon/install/ipsilon-client-install index 484c462..9ed2a6f 100755 --- a/ipsilon/install/ipsilon-client-install +++ b/ipsilon/install/ipsilon-client-install @@ -123,8 +123,12 @@ def saml2(): psp = '' saml_secure = 'Off' + ssl_require = '#' + ssl_rewrite = '#' if args['saml_secure_setup']: saml_secure = 'On' + ssl_require = '' + ssl_rewrite = '' samlopts = {'saml_base': args['saml_base'], 'saml_protect': saml_protect, @@ -135,6 +139,9 @@ def saml2(): 'saml_sp': args['saml_sp'], 'saml_secure_on': saml_secure, 'saml_auth': saml_auth, + 'ssl_require': ssl_require, + 'ssl_rewrite': ssl_rewrite, + 'sp_hostname': args['hostname'], 'sp': psp} files.write_from_template(SAML2_CONFFILE, SAML2_TEMPLATE, samlopts) |