IdP 3.2 - ECDHE cipher

[Marvin Addison]

>
> 13:51:00.985 - INFO [org.eclipse.jetty.util.ssl.SslContextFactory:1246]
> - No Cipher matching 'TLS_ECDHE.*' is supported
>

That appears to be coming from settings specified in the Jetty SSL
connector config:

    <Set name="IncludeCipherSuites">
      <Array type="String">
          <Item>TLS_ECDHE.*</Item>
          <Item>TLS_RSA.*</Item>
      </Array>
    </Set>

That's a notable difference between the 9.2 and 9.3 docs. I'm not using
that syntax (we use an explicit list of cipher suites) and our 9.3 IdP
supports ECDHE just fine.

M <users-unsubscribe at shibboleth.net>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20151204/8f3f931c/attachment.html>