diff options
author | Nathan Kinder <nkinder@redhat.com> | 2015-03-09 20:28:47 -0700 |
---|---|---|
committer | Rob Crittenden <rcritten@redhat.com> | 2015-03-10 18:24:01 -0400 |
commit | 42700be962e245243f10c30a29c41fcda1f3f712 (patch) | |
tree | 08c2fb51959ad9f59866695517247963abda1a1f /ui | |
parent | e0aa4f23846fa9f6bb0fb9eb021e930b035100eb (diff) | |
download | ipsilon-42700be962e245243f10c30a29c41fcda1f3f712.tar.gz ipsilon-42700be962e245243f10c30a29c41fcda1f3f712.tar.xz ipsilon-42700be962e245243f10c30a29c41fcda1f3f712.zip |
Require SSL on SP when using --saml-secure-setup
If ipsilon-client-install is used with the --saml-secure-setup
option (which is set by default), only https connections will
work for authentication. We are not setting the SSLRequireSSL
directive though, so we set mellon up to fail.
This patch adds the SSLRequireSSL directive to the SP config
when --saml-secure-setup is specified. In addition, we add a
rewrite rule to rewrite http requests to https for the SP.
https://fedorahosted.org/ipsilon/ticket/80
Signed-off-by: Nathan Kinder <nkinder@redhat.com>
Reviewed-by: Rob Crittenden <rcritten@redhat.com>
Diffstat (limited to 'ui')
0 files changed, 0 insertions, 0 deletions