Too many redirects

[Jonathan Maybaum <maybaum@xxxxxxxxx>]

Cosign-discuss,
Continuing the epic saga of establishing a test-only cosign service  
on OS X 10.4.2...

Cosign is built and installed
Created my own CA, signed a cert, installed it and its key, and the  
CA cert. Ran c_rehash on the CA cert.
Passed openssl verify for sslclient and sslserver
Added cosign to /etc/services on 6663/tcp
Created /etc/cosign.conf (below)
Added directives to httpd.conf (below)

Now the problem is that I get a browser error for "Too many  
redirects, last redirect from..." followed by a URL that looks like  
several cosigin-xxx URLs concatenated together.

Suggestions? How to debug?

Thanks,
--Jon Maybaum

/etc/cosign.conf:

#
# keyword           subject cn           tickets/proxy proxyfile
#
  cgi        maybaum.med.umich.edu
  service    maybaum.med.umich.edu        T
  set   cosigncert          /var/cosign/certs/cosigncert.pem
  set   cosignkey           /var/cosign/certs/cosignkey.pem
  set   cosignhost          maybaum.med.umich.edu
#  set    cosigndb        /var/somewhere/cosign
  set    cosigncadir        /var/cosign/certs/CA
  set    cosignticketcache    /var/cosign/ticket
#  set    cosignkeytab        /etc/keytab.cosign
  set    cosignlogouturl        http://maybaum.med.umich.edu
#  set    cosignloopurl        http://cosign.edu/looping.html
#  set    cosignnettimeout    300 (time in seconds for net connections)
  set    cosignport        6663

httpd_443.conf:


<VirtualHost *:443>
    ServerAdmin admin@xxxxxxxxxxx
    DocumentRoot "/Library/WebServer/Documents"
    DirectoryIndex "index.html" "index.php"
    CustomLog "/var/log/httpd/access_log" "%h %l %u %t \"%r\" %>s %b"
    ErrorLog "/var/log/httpd/error_log"
    ErrorDocument 404 /error.html
    CosignProtected On
    CosignHostname maybaum.med.umich.edu
    CosignService maybaum.med.umich.edu
    CosignRedirect https://maybaum.med.umich.edu:6663/
    CosignPostErrorRedirect https://maybaum.med.umich.edu/error.html
    CosignCrypto /var/cosign/certs/cosignkey.pem /var/cosign/certs/ 
cosigncert.pem /var/cosign/certs/CA
    <IfModule mod_ssl.c>
        SSLEngine On
        SSLLog "/var/log/httpd/ssl_engine_log"
        SSLCertificateFile "/etc/certificates/Default.crt"
        SSLCertificateKeyFile "/etc/certificates/Default.key"
        SSLCipherSuite "ALL:!ADH:RC4+RSA:+HIGH:+MEDIUM:+LOW:!SSLv2: 
+EXP:+eNULL"
    </IfModule>
    <IfModule mod_dav.c>
        DAVLockDB "/var/run/davlocks/.davlockany_80_default"
        DAVMinTimeout 600
    </IfModule>
    <Directory "/Library/WebServer/Documents">
        Options All -Indexes -ExecCGI -Includes +MultiViews
        AllowOverride None
        <IfModule mod_dav.c>
            DAV Off
        </IfModule>
    </Directory>
    <IfModule mod_rewrite.c>
        RewriteEngine On
        RewriteCond %{REQUEST_METHOD} ^TRACE
        RewriteRule .* - [F]
    </IfModule>
    <IfModule mod_alias.c>
    </IfModule>
    ServerAlias *
    LogLevel warn
</VirtualHost>