Shib IDP's LDAPS attribute resolution and SSLv3

[Cantor, Scott]

On 10/15/14, 4:10 PM, "Christopher Bongaarts" <cab at umn.edu> wrote:
>
>The underlying JSSE support is there (in JDK6 for TLS1.1, JDK7 for
>TLS1.2), so it might just be a matter of figuring out where to tweak
>those settings... it's tricky here since we have multiple layers
>involved (VT-ldap, JNDI, JSSE; plus repeat for the JAAS login handler if
>you're using it).

That's what I thought, so my next conclusion would be that they didn't
just turn off SSLv3, they turned off all support for ldaps on 636 without
realizing it.

-- Scott