Security Advisory 20120227

[Cantor, Scott]

> There is no load balancer performing the SSL-offloading on the shibboleth
> server  Below is the cert.

Nope...

> Also found some extra information when I turned on Debug for ldap:
> 16:25:56.858 - DEBUG
> [edu.vt.middleware.ldap.ssl.DefaultHostnameVerifier:123] -   hostname =
> fiuldap1.fiu.edu
> 16:25:56.859 - DEBUG
> [edu.vt.middleware.ldap.ssl.DefaultHostnameVerifier:124] -   cert =
> CN=rhldapc03.fiu.edu, OU=Division of Information Technology, O=Florida
> International University, L=Miami, ST=Alabama, C=US

That is the cert. No wildcard.

-- Scott