Red Hat Enterprise 6 and libcurl

[Brian Reindel]

Okay, I see that now, and it is referenced. However, we still seem to
be having issues. When I access the service provider I get the
following message:

"Cannot connect to shibd process, a site adminstrator should be notified."

There are no logs in /var/log/shibboleth, and the only way I can
identify any issues is by using the shibd -t command. Regarding the
original message, my Apache configuration for the SSLCipherSuite is as
follows:

SSLEngine on
SSLProtocol all -SSLv2
SSLCipherSuite HIGH:MEDIUM:!aNULL:!MD5

I'm not the server administrator, so aside from making Apache and
Shibboleth configuration modifications (which all worked locally in my
development environment) I'm just trying to do anything I can do
before passing this along to the admin to fix the installation.

Brian


On Thu, Sep 12, 2013 at 5:52 PM, Scott Koranda <skoranda at gmail.com> wrote:
> On Thu, Sep 12, 2013 at 4:29 PM, Brian Reindel <brian at reindel.com> wrote:
>> This is related to this issue:
>>
>> https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPLinuxRH6
>>
>> We run Red Hat Enterprise 6.4, and recently installed the SP in our
>> dev environment.
>>
>> shibd -t shows me this when I start Apache:
>>
>> 2013-09-12 17:23:25 ERROR XMLTooling.libcurl.InputStream : error while
>> fetching [my metadata url]: (59) Unknown cipher in list:
>> ALL:!aNULL:!LOW:!EXPORT:!SSLv2
>> 2013-09-12 17:23:25 ERROR XMLTooling.libcurl.InputStream : on Red Hat
>> 6+, make sure libcurl used is built with OpenSSL
>>
>> I'm confused by the wiki, and this statement:
>>
>> "The /etc/init.d/shibd script installed for you will also include a
>> LD_LIBRARY_PATH variable that directs the shibd process to load the
>> alternative version of libcurl.so instead of the normal one."
>>
>> I viewed the shibd script and I see no LD_LIBRARY_PATH variable, but
>> the wiki seems to indicate I shouldn't have to make any changes.
>>
>> What might I be missing?
>>
>
> On a RHEL 6.x system the file
>
> /etc/sysconfig/shibd
>
> contains the definition for LD_LIBRARY_PATH. That file is sourced from
> /etc/init.d/shibd.
>
> Scott K
> --
> To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net