Backchannel attribute query vs. SSL handshake error

[Marvin Addison]

>
> Tried this with two SPs, one running openssl 0.9 and the other openssl
> 1.0.1.


I was going to suggest that perhaps an older OpenSSL version that doesn't
support the strong ciphers recommended for the Jetty IdP config, but 1.0.1
ought to be recent enough to support them. I'd recommend an SSL trace on
the IdP, -Djavax.net.debug=ssl, and see what that shows. I find that data
very helpful for troubleshooting SSL handshake problems.

M <users-unsubscribe at shibboleth.net>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20150731/147ca298/attachment.html>