SAML1.1 attribute release on Shib 3

[Cantor, Scott]

On 2/15/17, 12:05 PM, "users on behalf of Steve Glover" <users-bounces at shibboleth.net on behalf of Steve.Glover at jisc.ac.uk> wrote:

> Maybe it's your configuration after all....

> $ openssl s_client -connect idp3.dev.cardiffmet.ac.uk:8443 -showcerts
> CONNECTED(00000003)
> 139985115449248:error:140790E5:SSL routines:SSL23_WRITE:ssl handshake failure:s23_lib.c:184:

Unless you're using a very current OpenSSL and even then likely forcing TLS 1.0 at least, that's about what I'd expect from a properly configured TLS endpoint. Seeing that sort of failure is more about the client than the server.

-- Scott