MetadataProvider SSL errors

Gahring, David A gahringd at
Tue Jul 10 16:20:43 EDT 2018


We are running the Shibboleth SP v2.6 on a SLES 11 SP 4 server, and I’m trying to get remote metadata out of ADFS.  We also have Shib2 running on a Win/IIS platform, and that is working fine.  The error appears to be related to the ciphers (?) being used by libcurl to negotiate a secure connection.  I’ve tried a number of things from cipher options to TransportOption settings with no joy.

Any ideas or observations would be appreciated.  Here is the error I’m seeing in our shibd.log file after startup.

2018-07-10 16:07:21 INFO Shibboleth.Application : building MetadataProvider of type XML...
2018-07-10 16:07:21 ERROR XMLTooling.libcurl.InputStream : error while fetching (35) error:1408D13A:SSL routines:SSL3_GET_KEY_EXCHANGE:unable to find ecdh parameters
2018-07-10 16:07:21 ERROR XMLTooling.ParserPool : fatal error on line 0, column 0, message: internal error in NetAccessor

Thanks for any help in pointing me in the right direction.. ☺
David A. Gahring
Systems Consultant - IT Department
Palm Beach State College
4200 Congress Avenue
Lake Worth, FL 33461
Work: 561.868.3320
Cell: 904.742-5407
Email: gahringd at


Please note: Due to Florida’s broad open records law, most written communication to or from College employees is public record, available to the public and the media upon request. Therefore, this e-mail communication may be subject to public disclosure.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image001.png
Type: image/png
Size: 22023 bytes
Desc: image001.png
URL: <>

More information about the users mailing list