環境

• Confluence running behind Apache
• SSL enabled on Confluence
• Confluence loads at https://...

症状

• Between login and Confluence dashboard, warning messages pop up
• Confluence presents "insecure content" warnings to users even though Confluence is running over SSL

診断

Custom authentication is being used. Shibboleth, in this example.

原因

There are missing configuration settings in the shib.conf file.

ソリューション

• Add ShibRedirectToSSL 443 configuration settings to shib.conf. Similar to:

  <Location /<context-path-here if necessary>>
  AuthType shibboleth
  ShibUseEnvironment On
  ShibUseHEaders On
  ShibRequestSetting requireSession 1
  require shibboleth
  ShibRedirectToSSL 443
  </Location>