Backchannel failing after upgrade

[James Drews]

Environment: Windows Server
Old version: 3.1.2 (jetty 9.2)
New Version 3.3.0 (jetty 9.3)

I've done the upgrade with the MSI from the shibboleth downloads. Most things appear to be working, except when our SP tries to use the backchannel port.

In debugging, if I use:
openssl s_client -connect server:8443

it connects and I can spit in HTTP/1.1 commands just fine

If I use the cert for the shib server (public key for which is in the downloaded metadata used by the IDP) and the command:

openssl s_client -cert shib-sp.pem -key shib-sp-key.pem -connect server:8443

the connection is immediately dropped by the server.

I didn't see anything "extra" to do in the release notes that had to be done after the upgrade install. I've also looked at the document describing the jetty 9.3 config, and I'm not seeing anything out of place there either.

Ideas?

James




-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20170112/13883c6a/attachment.html>