<div dir="ltr">Well, we are using it for the SSO transaction (which uses Apache), but I see your point. I don't really know how Java's dependencies are set up, but if you say it's not relying on OSSL, I will take your word for it. That makes life much simpler anyway.<div>
<br></div><div>As for the SSL thing, I have a server mirrored on another system and I can set it up with 1.7 and see if I can get an OpenSSL connection to Tomcat on 8443. I will give that a shot and let you know what I find out.</div>
<div><br></div><div>Chris</div></div><div class="gmail_extra"><br><br><div class="gmail_quote">On Mon, Jul 29, 2013 at 2:50 PM, Cantor, Scott <span dir="ltr"><<a href="mailto:cantor.2@osu.edu" target="_blank">cantor.2@osu.edu</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div class="im">On 7/29/13 5:47 PM, "Christopher Peters" <<a href="mailto:cjpeters@uci.edu">cjpeters@uci.edu</a>> wrote:<br>
<br>
>I will work on upgrading Java to 1.7 and possibly OpenSSL and see if that<br>
>fixes things. We do have a rather old version of OpenSSL on the system,<br>
>and the related libraries. And, of course, an old version of Java.<br>
<br>
</div>You're not using OpenSSL, that's not relevant.<br>
<br>
The bad cert error isn't the expiration, we're talking protocol level<br>
issues here. OpenSSL's s_client doesn't care about the dates or the<br>
validity, it's just trying to negotiate the connection.<br>
<div class="HOEnZb"><div class="h5"><br>
-- Scott<br>
<br>
<br>
--<br>
To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.net</a><br>
</div></div></blockquote></div><br><br clear="all"><div><br></div>-- <br><div dir="ltr">
<font face="arial black, sans-serif">Chris Peters</font><br>Middleware Services Developer<br>Office of Information Technology - NSP<br>(949) 824-6845<br><a href="mailto:cjpeters@uci.edu" target="_blank">cjpeters@uci.edu</a><br>
</div>
</div>