Shib SP fails on MD load with URL

[Peter Schober]

* Mike Flynn <shibbolethlynda at yahoo.com> [2013-11-06 15:33]:
> I have a customer that sent me a URL to their metadata.  In ANY
> browser I can hit the URL and get the metadata just
> fine.  Shibboleth, however, reports a 503 for the URL.
[...]
> 2013-11-06 05:58:08 ERROR XMLTooling.libcurl.InputStream : error
> while fetching
> https://banner.sunyjcc.edu/test_home/test_idp/shibboleth: (22) The
> requested URL returned error: 503

Does "ANY browser" include something on the machine of the SP itself?

Fyi, elinks[1] reports an "SSL error" on that URL, when I look at that
with openssl's s_client I only notice that the server is misconfigured
in sending the root (trust anchor) certificate as part of the
certificate chain.

What platform is this on, what ssl version (as used by libcurl)?
-peter

[1] http://elinks.or.cz/