SSL handshake problems with xmlsectool

[Wessel, Keith William]

All,

Our admins recently made a change to our Apache SSL cipher suite configuration to only support SSLv3.

Now, xmlsectool's unhappy with SSL handshaking:

Javax.net.SSL.SSLException: Received fatal alert: bad_record_mac

I tried adding -Dhttps.protocols=SSLv3 to various places in the java command in the xmlsectool.sh script (as JAVA_OPTS doesn't seem to be picked up by xmlsectool). Still, same error. And our Apache logs are definitely indicating SSL handshake errors.

Anyone seen this and have a solution?

Thanks,
Keith

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20121016/20bd9700/attachment.html