SSL 配置，然后使用 httpd、modjk 和 openAM Fedlet 请求重定向到 JBOSS 以进行单点登录

Question

SSL 配置不适用于 httpd ModJk 重定向到 jboss Web 通过 Fedlet Sign saml2 方法与 OpenAM 集成的应用程序。

由于我是第一次这样做，因此我要求对此提供一些帮助。 我正在尝试为 Java web 应用程序启用 SSL 配置，该应用程序通过 fedlet saml2 方法集成到单点登录。 SSL 配置完成，然后使用 httpd、modjk 和 openAM Fedlet 请求重定向到 JBOSS 以进行单点登录。 在 OpenAM（版本 11）服务器控制台中，我通过配置 https 应用程序 URL 生成了 fedlet，并在我们的应用程序中使用相同的 conf 文件夹与 openAM Z044063C23354128B336ZDF86F1888E 身份验证进行通信。 当我在浏览器中点击应用程序 URL 时，请求被重定向到 OpenAM 以进行 ldap 身份验证，并且在验证 LDAP 凭据后，它没有登录应用程序。

遵循的步骤：

1   OpenAM deployed tomcat server is configured with SSL certificate using connector tag.
2   By accessing openAM console, created IDP server name (https://auth.test.app.com:443).
3   After that, i created fedlet in OpenAM for my web application by giving URL (https://auth.test.app.com:443/MyWebApplication)
4   Web Application is configured with conf folder of fedlet that was generated and deployed into jboss servers
5   openssl installed into apache httpd server and ssl configurations are made for ssl.conf,httpd.conf and modjk.conf files as specified in below (plz refer all configurations section provided below)
6   I am able to access app URL(https://auth.test.app.com/MyWebApplication/) in browser only when i did put entry into my local machine /etc/hosts/ file but i am doing all these changes in unix box server(I should access URL in public internet but Not sure if i miss anything i am not able to access until i register in my local machine hosts file. With http option, i am able to access without registering domain in my local machine hosts file, when try to configure https, URLs is not accessible until I register domain in local hosts file).
7   When i browse app URL https://auth.test.app.com/MyWebApplication/, It is redirecting to OpenAM server URL(https://auth.test.app.com/Signin/UI/Login) for ldap authentication. 
8   After entering ldap credentials in OpenAM login URL, THEN it is not logging into my application using https protocol, it is breaking and no logs observed. The whole process is working fine when using HTTP protocol but it is failing when trying to configure HTTPS.

工艺流程图：

点击这里查看流程图

服务器详情：

APP URLs       -->  https://auth.test.app.com/MyWebApplication/, https://auth.test.app.com
MOd jk server  -->  10.xx.xxx.143
OpenAM server  -->  10.xx.xxx.152 (openAM console can be accessed using URL https://auth.test.app.com)
Jboss_servers  -->  10.xx.xxx.111, 10.xx.xxx.222

所有配置文件

##----SSL.conf------##
default values
-------
----
Listen 443 https
<VirtualHost _default_:443>
ServerName auth.test.app.com
SSLProtocol all -SSLv2 -SSLv3
SSLCipherSuite HIGH:3DES:!aNULL:!MD5:!SEED:!IDEA
SSLCertificateFile "/etc/apache2/2.2/server.crt"
SSLCertificateKeyFile "/etc/apache2/2.2/server.pem"
#My Web application using ajp protol
ProxyPass /* ajp://10.xx.xxx.111:443/MyWebApplication/
ProxyPassReverse /* ajp://10.xx.xxx.111:443/MyWebApplication/
<Proxy *>
AddDefaultCharset off
Order deny,allow
Allow from all
</Proxy>
#mounting jk property file
JkMount /* worker
</VirtualHost>

##----httpd.conf--------##
default values
-------
----
IncludeOptional conf.d/SSL.conf

##------modjk.conf--------##
default values
-------
----
JkMountFile conf/UriWorkerMap.properties
JkWorkersFile /etc/httpd/conf/worker.properties
<Location /jkstatus/>
    JkMount statusmanager
    Order deny,allow
    Allow from all
</Location>

##----UriWorkerMap.proeperties---------##
#APP Load Balancer
/MyWebApplication=applb
/MyWebApplication/*=applb

#OpenAM Server
/Signin=Signlb
/Signin/*=Signlb

##----worker.properties-----------------##
#Log
workers.apache_log=/var/log/httpd
#Worker List
worker.list=applb,approute1,approute2,Signlb,status
worker.status.type=status
worker.approute1.type=lb
worker.approute1.sticky_session=True
worker.approute1.balance_workers=node1

#Jboss Node1
worker.node1.port=8009
worker.node1.host=10.xx.xxx.111
worker.node1.redirect=node2
worker.node1.type=ajp13
worker.node1.lbfactor=1

#Jboss Node 2
worker.approute2.type=lb
worker.approute2.sticky_session=True
worker.approute2.balance_workers=node2
worker.node2.port=8009
worker.node2.host=10.xx.xxx.222

#OpenAM Server Route
worker.node4.port=8009
worker.node4.host=10.xx.xxx.152
worker.node4.type=ajp13
worker.node4.lbfactor=1

worker.Signlb.type=lb
worker.Signlb.sticky_session=True
worker.Signlb.balance_workers=node4
                                                                                                                      


##----OpeanAM-Tomcat Connector----##
<Connector SSLEnabled="true" acceptCount="100" clientAuth="false"
    disableUploadTimeout="true" enableLookups="false" maxThreads="25"
    port="443" keystoreFile="/path/jksfile/keystorefile.jks" keystorePass="Password"
    protocol="org.apache.coyote.http11.Http11NioProtocol" scheme="https"
    secure="true"  sslProtocol="TLS" redirectPort="8443"/>
    
##---JBOSS -connector--------------##
<connector name="https" protocol= "org.apache.coyote.http11.Http11NioProtocol" scheme="https" socket-binding="https" secure="true">
                        <ssl name="jboss7_ssl" password="Password" certificate-key-file="/path/jksfile/keystorefile.jks" protocol="TLSv1+TLSv1.1+TLSv1.2"/>
</connector>