Backchannel attribute query vs. SSL handshake error

[Cantor, Scott]

On 7/31/15, 1:27 AM, "users on behalf of Misagh Moayyed" <users-bounces at shibboleth.net on behalf of mmoayyed at unicon.net> wrote:

>Attempts to connect to the idp from the SP via openssl: "openssl s_client
>-cert ./sp-cert.pem -key ./sp-key.pem -connect idp.example.org:8443 -debug
>-msg -state" reports back SSL handshake errors. Attempts to connect to the
>idp from the idp machine itself with the same exact command works
>successfully. 

That usually suggests an issue with the interface(s) it's actually listening on, there really isn't anything else that could apply to give you different results with the same OpenSSL client.

If nmap -p 8443 from off-host reports the port is open, then I guess one possibility would probably be something else listening on the port and not Jetty.

-- Scott