IdP 3.2 - ECDHE cipher

[Cantor, Scott]

On 12/4/15, 2:00 PM, "users on behalf of Marvin Addison" <users-bounces at shibboleth.net on behalf of marvin.addison at gmail.com> wrote:



>That's a notable difference between the 9.2 and 9.3 docs. I'm not using that syntax (we use an explicit list of cipher suites) and our 9.3 IdP supports ECDHE just fine.

The reason they're different is that initially I couldn't get the regex stuff working on 9.2, even though Jetty documented it that way. It did work on 9.3. It's possible that's a Java 8 issue because I did make it work on Java 8 + 9.2 (or 9.3).

Anyway, for 9.3 and Java 8, it should work fine. But the error message does suggest that's applying the expression too literally. I don't know why it does that.

Obviously regex is a bit more general/less brittle.

Ultimately, Jetty is not ours and any documentation we supply is at best an example and likely always imperfect.

-- Scott