Problems with back-channel connection

[Cantor, Scott]

On 10/8/13 9:46 AM, "Adam Portier" <aportier at haverford.edu> wrote:
>
>However, when I went to implement Logout behavior, I noticed the
>back-channel was not working
> correctly.

a) Only very limited forms of logout are supported. Whatever you're trying
to do is likely not part of this software.

b) Logout is very rarely a back channel operation.

c) You log has nothing to do with a logout attempt, it's an attribute
query, indicating your IdP supplied no attributes to the SP in the initial
assertion.

The error means your web server isn't handling TLS 1.1 properly or in a
way that the SP can deal with. Your IdP has nothing to do with it isn't
even being reached.

https://bugs.launchpad.net/ubuntu/+source/openssl/+bug/861137

If you're using Apache in front of the IdP, not doing that might be one
fix.

-- Scott