<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0" /> <base href="https://issues.shibboleth.net/jira" />
<title>Message Title</title>
</head>
<body class="jira" style="color: #333; font-family: Arial, sans-serif; font-size: 14px; line-height: 1.429">
<table id="background-table" cellpadding="0" cellspacing="0" width="100%" style="border-collapse: collapse; mso-table-lspace: 0pt; mso-table-rspace: 0pt; background-color: #f5f5f5; border-collapse: collapse; mso-table-lspace: 0pt; mso-table-rspace: 0pt">
<!-- header here -->
<tr>
<td id="header-pattern-container" style="padding: 0px; border-collapse: collapse; padding: 10px 20px">
<table id="header-pattern" cellspacing="0" cellpadding="0" border="0" style="border-collapse: collapse; mso-table-lspace: 0pt; mso-table-rspace: 0pt">
<tr>
<td id="header-avatar-image-container" valign="top" style="padding: 0px; border-collapse: collapse; vertical-align: top; width: 32px; padding-right: 8px"> <img id="header-avatar-image" class="image_fix" src="cid:jira-generated-image-avatar-c9a83051-e66d-4cd5-b75b-3afe761950b9" height="32" width="32" border="0" style="border-radius: 3px; vertical-align: top" />
</td>
<td id="header-text-container" valign="middle" style="padding: 0px; border-collapse: collapse; vertical-align: middle; font-family: Arial, sans-serif; font-size: 14px; line-height: 20px; mso-line-height-rule: exactly; mso-text-raise: 1px"> <a class="user-hover" rel="rdw@iay.org.uk" id="email_rdw@iay.org.uk" href="https://issues.shibboleth.net/jira/secure/ViewProfile.jspa?name=rdw%40iay.org.uk" style="color:#3b73af;; color: #3b73af; text-decoration: none">Rod Widdowson</a> <strong>commented</strong> on <a href="https://issues.shibboleth.net/jira/browse/SSPCPP-708" style="color: #3b73af; text-decoration: none"><img src="cid:jira-generated-image-avatar-ec1fe53d-f676-472b-bfeb-36a17c40dedd" height="16" width="16" border="0" align="absmiddle" alt="Bug" /> SSPCPP-708</a>
</td>
</tr>
</table>
</td>
</tr>
<tr>
<td id="email-content-container" style="padding: 0px; border-collapse: collapse; padding: 0 20px">
<table id="email-content-table" cellspacing="0" cellpadding="0" border="0" width="100%" style="border-collapse: collapse; mso-table-lspace: 0pt; mso-table-rspace: 0pt; border-spacing: 0; border-collapse: separate">
<tr>
<!-- there needs to be content in the cell for it to render in some clients -->
<td class="email-content-rounded-top mobile-expand" style="padding: 0px; border-collapse: collapse; color: #fff; padding: 0 15px 0 16px; height: 15px; background-color: #fff; border-left: 1px solid #ccc; border-top: 1px solid #ccc; border-right: 1px solid #ccc; border-bottom: 0; border-top-right-radius: 5px; border-top-left-radius: 5px; height: 10px; line-height: 10px; padding: 0 15px 0 16px; mso-line-height-rule: exactly">
</td>
</tr>
<tr>
<td class="email-content-main mobile-expand " style="padding: 0px; border-collapse: collapse; border-left: 1px solid #ccc; border-right: 1px solid #ccc; border-top: 0; border-bottom: 0; padding: 0 15px 0 16px; background-color: #fff">
<table class="page-title-pattern" cellspacing="0" cellpadding="0" border="0" width="100%" style="border-collapse: collapse; mso-table-lspace: 0pt; mso-table-rspace: 0pt">
<tr>
<td style="vertical-align: top;; padding: 0px; border-collapse: collapse; padding-right: 5px; font-size: 20px; line-height: 30px; mso-line-height-rule: exactly" class="page-title-pattern-header-container"> <span class="page-title-pattern-header" style="font-family: Arial, sans-serif; padding: 0; font-size: 20px; line-height: 30px; mso-text-raise: 2px; mso-line-height-rule: exactly; vertical-align: middle"> <a href="https://issues.shibboleth.net/jira/browse/SSPCPP-708" style="color: #3b73af; text-decoration: none">Re: Default cipherSuites setting breaks SOAP on RedHat</a> </span>
</td>
</tr>
</table>
</td>
</tr>
<tr>
<td id="text-paragraph-pattern-top" class="email-content-main mobile-expand comment-top-pattern" style="padding: 0px; border-collapse: collapse; border-left: 1px solid #ccc; border-right: 1px solid #ccc; border-top: 0; border-bottom: 0; padding: 0 15px 0 16px; background-color: #fff; border-bottom: none; padding-bottom: 0">
<table class="text-paragraph-pattern" cellspacing="0" cellpadding="0" border="0" width="100%" style="border-collapse: collapse; mso-table-lspace: 0pt; mso-table-rspace: 0pt; font-family: Arial, sans-serif; font-size: 14px; line-height: 20px; mso-line-height-rule: exactly; mso-text-raise: 2px">
<tr>
<td class="text-paragraph-pattern-container mobile-resize-text " style="padding: 0px; border-collapse: collapse; padding: 0 0 10px 0">
<p style="margin: 10px 0 0 0">So it seems to me that this is a 1.0.1* vs 1.0.2* thing.</p>
<p style="margin: 10px 0 0 0">Attached various outputs from various versions</p>
<ul>
<li>
1.0.1e-fips (found running on shibboleth,net)
</li>
<li>
1.0.1h windows (found at <a href="https://indy.fulgan.com/SSL/" class="external-link" rel="nofollow" style="color: #3b73af; text-decoration: none">fulan.com</a>
</li>
<li>
1.0.1t windows (found at <a href="https://indy.fulgan.com/SSL/" class="external-link" rel="nofollow" style="color: #3b73af; text-decoration: none">fulan.com</a>
</li>
<li>
1.0.2f windows from 2.6.0.0
</li>
<li>
1.0.2h windows (from shibboleth.net/downloads)
</li>
</ul>
<p style="margin: 10px 0 0 0">In all cases <tt>ciphers -v 'ECDH+AESGCM:ECDH:!aNULL:!eNULL:!LOW:!EXPORT:!RC4:!SHA:!SSLv2'</tt> does the same thing as Vlad reported.<br /> In all 1.0.2 cases we report something sensible for <tt>ciphers -v 'ECDHE+AESGCM:ECDHE:!aNULL:!eNULL:!LOW:!EXPORT:!RC4:!SHA:!SSLv2'</tt><br /> In all 1.0.1 cases we get the error (the only difference being line numbers).</p>
<p style="margin: 10px 0 0 0">Of course the changes in 1.0.2 is pretty huge. I am wondering whether this might be related:</p>
<p style="margin: 10px 0 0 0"><cite style="font-style: italic">For consistency with EDH, ephemeral ECDH is now called "EECDH" (not "ECDHE"). For consistency with the code for DH certificates, use of ECDH certificates is now considered ECDH authentication, not RSA or ECDSA authentication (the latter is merely the CA's signing algorithm and not actively used in the protocol).</cite></p>
<p style="margin: 10px 0 0 0">(from <a href="https://www.openssl.org/news/cl102.txt" class="external-link" rel="nofollow" style="color: #3b73af; text-decoration: none">https://www.openssl.org/news/cl102.txt</a>)</p>
<p style="margin: 10px 0 0 0"> <span class="nobr"><a href="https://issues.shibboleth.net/jira/secure/attachment/12842/12842_Centos.txt" title="Centos.txt attached to SSPCPP-708" style="color: #3b73af; text-decoration: none">Centos.txt<sup><img class="rendericon" src="cid:jira-generated-image-static-link_attachment_7-949ced18-a1d2-468e-a63a-54ca2741fec9" height="7" width="7" align="absmiddle" alt="" border="0" /></sup></a></span> <span class="nobr"><a href="https://issues.shibboleth.net/jira/secure/attachment/12840/12840_win1.0.1h.txt" title="win1.0.1h.txt attached to SSPCPP-708" style="color: #3b73af; text-decoration: none">win1.0.1h.txt<sup><img class="rendericon" src="cid:jira-generated-image-static-link_attachment_7-949ced18-a1d2-468e-a63a-54ca2741fec9" height="7" width="7" align="absmiddle" alt="" border="0" /></sup></a></span> <span class="nobr"><a href="https://issues.shibboleth.net/jira/secure/attachment/12838/12838_win1.0.1t.txt" title="win1.0.1t.txt attached to SSPCPP-708" style="color: #3b73af; text-decoration: none">win1.0.1t.txt<sup><img class="rendericon" src="cid:jira-generated-image-static-link_attachment_7-949ced18-a1d2-468e-a63a-54ca2741fec9" height="7" width="7" align="absmiddle" alt="" border="0" /></sup></a></span> <span class="nobr"><a href="https://issues.shibboleth.net/jira/secure/attachment/12841/12841_win1.0.2f.txt" title="win1.0.2f.txt attached to SSPCPP-708" style="color: #3b73af; text-decoration: none">win1.0.2f.txt<sup><img class="rendericon" src="cid:jira-generated-image-static-link_attachment_7-949ced18-a1d2-468e-a63a-54ca2741fec9" height="7" width="7" align="absmiddle" alt="" border="0" /></sup></a></span> <span class="nobr"><a href="https://issues.shibboleth.net/jira/secure/attachment/12839/12839_win1.0.2h.txt" title="win1.0.2h.txt attached to SSPCPP-708" style="color: #3b73af; text-decoration: none">win1.0.2h.txt<sup><img class="rendericon" src="cid:jira-generated-image-static-link_attachment_7-949ced18-a1d2-468e-a63a-54ca2741fec9" height="7" width="7" align="absmiddle" alt="" border="0" /></sup></a></span> </p>
</td>
</tr>
</table>
</td>
</tr>
<tr>
<td class="email-content-main mobile-expand " style="padding: 0px; border-collapse: collapse; border-left: 1px solid #ccc; border-right: 1px solid #ccc; border-top: 0; border-bottom: 0; padding: 0 15px 0 16px; background-color: #fff">
<table id="actions-pattern" cellspacing="0" cellpadding="0" border="0" width="100%" style="border-collapse: collapse; mso-table-lspace: 0pt; mso-table-rspace: 0pt; font-family: Arial, sans-serif; font-size: 14px; line-height: 20px; mso-line-height-rule: exactly; mso-text-raise: 1px">
<tr>
<td id="actions-pattern-container" valign="middle" style="padding: 0px; border-collapse: collapse; padding: 10px 0 10px 24px; vertical-align: middle; padding-left: 0">
<table align="left" style="border-collapse: collapse; mso-table-lspace: 0pt; mso-table-rspace: 0pt">
<tr>
<td class="actions-pattern-action-icon-container" style="padding: 0px; border-collapse: collapse; font-family: Arial, sans-serif; font-size: 14px; line-height: 20px; mso-line-height-rule: exactly; mso-text-raise: 0px; vertical-align: middle"> <a href="https://issues.shibboleth.net/jira/browse/SSPCPP-708#add-comment" target="_blank" title="Add Comment" style="color: #3b73af; text-decoration: none"> <img class="actions-pattern-action-icon-image" src="cid:jira-generated-image-static-comment-icon-71c9a2a5-7382-42ea-b2bc-4095884ad71a" alt="Add Comment" title="Add Comment" height="16" width="16" border="0" style="vertical-align: middle" /> </a>
</td>
<td class="actions-pattern-action-text-container" style="padding: 0px; border-collapse: collapse; font-family: Arial, sans-serif; font-size: 14px; line-height: 20px; mso-line-height-rule: exactly; mso-text-raise: 4px; padding-left: 5px"> <a href="https://issues.shibboleth.net/jira/browse/SSPCPP-708#add-comment" target="_blank" title="Add Comment" style="color: #3b73af; text-decoration: none">Add Comment</a>
</td>
</tr>
</table>
</td>
</tr>
</table>
</td>
</tr>
<!-- there needs to be content in the cell for it to render in some clients -->
<tr>
<td class="email-content-rounded-bottom mobile-expand" style="padding: 0px; border-collapse: collapse; color: #fff; padding: 0 15px 0 16px; height: 5px; line-height: 5px; background-color: #fff; border-top: 0; border-left: 1px solid #ccc; border-bottom: 1px solid #ccc; border-right: 1px solid #ccc; border-bottom-right-radius: 5px; border-bottom-left-radius: 5px; mso-line-height-rule: exactly">
</td>
</tr>
</table>
</td>
</tr>
<tr>
<td id="footer-pattern" style="padding: 0px; border-collapse: collapse; padding: 12px 20px">
<table id="footer-pattern-container" cellspacing="0" cellpadding="0" border="0" style="border-collapse: collapse; mso-table-lspace: 0pt; mso-table-rspace: 0pt">
<tr>
<td id="footer-pattern-text" class="mobile-resize-text" width="100%" style="padding: 0px; border-collapse: collapse; color: #999; font-size: 12px; line-height: 18px; font-family: Arial, sans-serif; mso-line-height-rule: exactly; mso-text-raise: 2px">
This message was sent by Atlassian JIRA <span id="footer-build-information">(v7.0.10#70120-<span title="37e3d7a6fc4d580639533e7f7c232c925e554a6a" data-commit-id="37e3d7a6fc4d580639533e7f7c232c925e554a6a}">sha1:37e3d7a</span>)</span>
</td>
<td id="footer-pattern-logo-desktop-container" valign="top" style="padding: 0px; border-collapse: collapse; padding-left: 20px; vertical-align: top">
<table style="border-collapse: collapse; mso-table-lspace: 0pt; mso-table-rspace: 0pt">
<tr>
<td id="footer-pattern-logo-desktop-padding" style="padding: 0px; border-collapse: collapse; padding-top: 3px"> <img id="footer-pattern-logo-desktop" src="cid:jira-generated-image-static-footer-desktop-logo-c910412f-6e1c-4d01-8f6e-e229a2a90162" alt="Atlassian logo" title="Atlassian logo" width="169" height="36" class="image_fix" />
</td>
</tr>
</table>
</td>
</tr>
</table>
</td>
</tr>
</table>
</body>
</html>