Shib IDP's LDAPS attribute resolution and SSLv3

[Ian Young]

On 16 Oct 2014, at 08:24, Rhys Smith <Smith at cardiff.ac.uk> wrote:

> Anyway, just saying that waking up to find your Shib IdP no longer works because your directory admins have instantly turned off SSLv3 is probably overkill on their part, at the moment. We have time to make the switch after first doing some appropriate testing and reconfiguration where necessary… Orderly transition is good.

I'd agree that what you're describing there could probably be politely described as the result of an excess of zeal in a production environment. I wouldn't assume that you have very much time for an orderly transition, though.

	-- Ian



-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 841 bytes
Desc: Message signed with OpenPGP using GPGMail
Url : http://shibboleth.net/pipermail/users/attachments/20141016/5369bcad/attachment-0001.bin