Hi,
I would like to use OpenID together with Gerrit. All services are served via reverse proxy.
When I access
https://subdomain.mycompany.net/openidserver/op
following XML is produced
<?xml version="1.0" encoding="UTF-8"?> <XRDS xmlns="xri://$xrds"> <XRD xmlns="xri://$xrd*($v*2.0)"> <Service> <Type>http://specs.openid.net/auth/2.0/server</Type> <URI>http://subdomain.mycompany.net/openidserver/op</URI> </Service> </XRD> </XRDS>
The correct openidserver url should be https and not http
<?xml version="1.0" encoding="UTF-8"?> <XRDS xmlns="xri://$xrds"> <XRD xmlns="xri://$xrd*($v*2.0)"> <Service> <Type>http://specs.openid.net/auth/2.0/server</Type> <URI>https://subdomain.mycompany.net/openidserver/op</URI> </Service> </XRD> </XRDS>
// Philipp
I suspect you need to set the scheme
in the Tomcat connector config to https
- see https://tomcat.apache.org/tomcat-7.0-doc/config/http.html - as the OpenID server calls req.getRequestURL().toString()
to populate the URI in the XRDS document, and from a brief skimming of the Tomcat source it appears that getRequestURL() delegates to getScheme(), which the scheme
setting is documented as controlling.
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.