Ex: Re: : CAS proxy validation failure - Configured TLS trust engine was not used

Paul B. Henson henson at cpp.edu
Wed Aug 19 05:12:47 UTC 2020


> From: Cantor, Scott
> Sent: Tuesday, August 18, 2020 4:10 PM
>
> I definitely do, and my calls are pretty much always to one place (our Grouper
> deployment). So it's hard to see the difference unless there's some oddness I'm
> not seeing in how connections are used in the two classes.

Do you know if the server has session caching enabled? If it is exposed to the Internet, you can use https://www.ssllabs.com/ssltest/ to check, it is labeled as "Session resumption (caching)" and "Session resumption (tickets)" in the results. If it does and you don't see this issue, I wonder why. Unless the trust engine is configured differently or something.

Thanks again for your help sorting this out, I'm going to sleep better tonight now that it looks like we figured it out. It was driving me nuts 8-/.



More information about the users mailing list