<div dir="ltr"><div class="gmail_quote"><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">13:51:00.985 - INFO [org.eclipse.jetty.util.ssl.SslContextFactory:1246]<br>
- No Cipher matching 'TLS_ECDHE.*' is supported<br></blockquote><div><br></div><div>That appears to be coming from settings specified in the Jetty SSL connector config:</div><div><br></div><div class="line number18 index17 alt1" style="font-family:Consolas,'Bitstream Vera Sans Mono','Courier New',Courier,monospace;font-size:14px;color:rgb(51,51,51);margin:0px!important;padding:0px 1em 0px 0px!important;border-radius:0px!important;border:0px!important;float:none!important;height:auto!important;outline:0px!important;overflow:visible!important;vertical-align:baseline!important;width:auto!important;min-height:auto!important;white-space:nowrap!important;background-image:none!important;background-position:initial!important;background-repeat:initial!important"><code class="xml spaces" style="font-family:Consolas,'Bitstream Vera Sans Mono','Courier New',Courier,monospace!important;border-radius:0px!important;border:0px!important;float:none!important;height:auto!important;margin:0px!important;outline:0px!important;overflow:visible!important;padding:0px!important;vertical-align:baseline!important;width:auto!important;min-height:auto!important;background:none!important">    </code><code class="xml plain" style="font-family:Consolas,'Bitstream Vera Sans Mono','Courier New',Courier,monospace!important;border-radius:0px!important;border:0px!important;float:none!important;height:auto!important;margin:0px!important;outline:0px!important;overflow:visible!important;padding:0px!important;vertical-align:baseline!important;width:auto!important;min-height:auto!important;color:rgb(0,0,0)!important;background:none!important"><</code><code class="xml keyword" style="font-family:Consolas,'Bitstream Vera Sans Mono','Courier New',Courier,monospace!important;border-radius:0px!important;border:0px!important;float:none!important;height:auto!important;margin:0px!important;outline:0px!important;overflow:visible!important;padding:0px!important;vertical-align:baseline!important;width:auto!important;font-weight:bold!important;min-height:auto!important;color:rgb(51,102,153)!important;background:none!important">Set</code> <code class="xml color1" style="font-family:Consolas,'Bitstream Vera Sans Mono','Courier New',Courier,monospace!important;border-radius:0px!important;border:0px!important;float:none!important;height:auto!important;margin:0px!important;outline:0px!important;overflow:visible!important;padding:0px!important;vertical-align:baseline!important;width:auto!important;min-height:auto!important;color:rgb(128,128,128)!important;background:none!important">name</code><code class="xml plain" style="font-family:Consolas,'Bitstream Vera Sans Mono','Courier New',Courier,monospace!important;border-radius:0px!important;border:0px!important;float:none!important;height:auto!important;margin:0px!important;outline:0px!important;overflow:visible!important;padding:0px!important;vertical-align:baseline!important;width:auto!important;min-height:auto!important;color:rgb(0,0,0)!important;background:none!important">=</code><code class="xml string" style="font-family:Consolas,'Bitstream Vera Sans Mono','Courier New',Courier,monospace!important;border-radius:0px!important;border:0px!important;float:none!important;height:auto!important;margin:0px!important;outline:0px!important;overflow:visible!important;padding:0px!important;vertical-align:baseline!important;width:auto!important;min-height:auto!important;color:rgb(0,51,102)!important;background:none!important">"IncludeCipherSuites"</code><code class="xml plain" style="font-family:Consolas,'Bitstream Vera Sans Mono','Courier New',Courier,monospace!important;border-radius:0px!important;border:0px!important;float:none!important;height:auto!important;margin:0px!important;outline:0px!important;overflow:visible!important;padding:0px!important;vertical-align:baseline!important;width:auto!important;min-height:auto!important;color:rgb(0,0,0)!important;background:none!important">></code></div><div class="line number19 index18 alt2" style="font-family:Consolas,'Bitstream Vera Sans Mono','Courier New',Courier,monospace;font-size:14px;color:rgb(51,51,51);margin:0px!important;padding:0px 1em 0px 0px!important;border-radius:0px!important;border:0px!important;float:none!important;height:auto!important;outline:0px!important;overflow:visible!important;vertical-align:baseline!important;width:auto!important;min-height:auto!important;white-space:nowrap!important;background-image:none!important;background-position:initial!important;background-repeat:initial!important"><code class="xml spaces" style="font-family:Consolas,'Bitstream Vera Sans Mono','Courier New',Courier,monospace!important;border-radius:0px!important;border:0px!important;float:none!important;height:auto!important;margin:0px!important;outline:0px!important;overflow:visible!important;padding:0px!important;vertical-align:baseline!important;width:auto!important;min-height:auto!important;background:none!important">      </code><code class="xml plain" style="font-family:Consolas,'Bitstream Vera Sans Mono','Courier New',Courier,monospace!important;border-radius:0px!important;border:0px!important;float:none!important;height:auto!important;margin:0px!important;outline:0px!important;overflow:visible!important;padding:0px!important;vertical-align:baseline!important;width:auto!important;min-height:auto!important;color:rgb(0,0,0)!important;background:none!important"><</code><code class="xml keyword" style="font-family:Consolas,'Bitstream Vera Sans Mono','Courier New',Courier,monospace!important;border-radius:0px!important;border:0px!important;float:none!important;height:auto!important;margin:0px!important;outline:0px!important;overflow:visible!important;padding:0px!important;vertical-align:baseline!important;width:auto!important;font-weight:bold!important;min-height:auto!important;color:rgb(51,102,153)!important;background:none!important">Array</code> <code class="xml color1" style="font-family:Consolas,'Bitstream Vera Sans Mono','Courier New',Courier,monospace!important;border-radius:0px!important;border:0px!important;float:none!important;height:auto!important;margin:0px!important;outline:0px!important;overflow:visible!important;padding:0px!important;vertical-align:baseline!important;width:auto!important;min-height:auto!important;color:rgb(128,128,128)!important;background:none!important">type</code><code class="xml plain" style="font-family:Consolas,'Bitstream Vera Sans Mono','Courier New',Courier,monospace!important;border-radius:0px!important;border:0px!important;float:none!important;height:auto!important;margin:0px!important;outline:0px!important;overflow:visible!important;padding:0px!important;vertical-align:baseline!important;width:auto!important;min-height:auto!important;color:rgb(0,0,0)!important;background:none!important">=</code><code class="xml string" style="font-family:Consolas,'Bitstream Vera Sans Mono','Courier New',Courier,monospace!important;border-radius:0px!important;border:0px!important;float:none!important;height:auto!important;margin:0px!important;outline:0px!important;overflow:visible!important;padding:0px!important;vertical-align:baseline!important;width:auto!important;min-height:auto!important;color:rgb(0,51,102)!important;background:none!important">"String"</code><code class="xml plain" style="font-family:Consolas,'Bitstream Vera Sans Mono','Courier New',Courier,monospace!important;border-radius:0px!important;border:0px!important;float:none!important;height:auto!important;margin:0px!important;outline:0px!important;overflow:visible!important;padding:0px!important;vertical-align:baseline!important;width:auto!important;min-height:auto!important;color:rgb(0,0,0)!important;background:none!important">></code></div><div class="line number20 index19 alt1" style="font-family:Consolas,'Bitstream Vera Sans Mono','Courier New',Courier,monospace;font-size:14px;color:rgb(51,51,51);margin:0px!important;padding:0px 1em 0px 0px!important;border-radius:0px!important;border:0px!important;float:none!important;height:auto!important;outline:0px!important;overflow:visible!important;vertical-align:baseline!important;width:auto!important;min-height:auto!important;white-space:nowrap!important;background-image:none!important;background-position:initial!important;background-repeat:initial!important"><code class="xml spaces" style="font-family:Consolas,'Bitstream Vera Sans Mono','Courier New',Courier,monospace!important;border-radius:0px!important;border:0px!important;float:none!important;height:auto!important;margin:0px!important;outline:0px!important;overflow:visible!important;padding:0px!important;vertical-align:baseline!important;width:auto!important;min-height:auto!important;background:none!important">          </code><code class="xml plain" style="font-family:Consolas,'Bitstream Vera Sans Mono','Courier New',Courier,monospace!important;border-radius:0px!important;border:0px!important;float:none!important;height:auto!important;margin:0px!important;outline:0px!important;overflow:visible!important;padding:0px!important;vertical-align:baseline!important;width:auto!important;min-height:auto!important;color:rgb(0,0,0)!important;background:none!important"><</code><code class="xml keyword" style="font-family:Consolas,'Bitstream Vera Sans Mono','Courier New',Courier,monospace!important;border-radius:0px!important;border:0px!important;float:none!important;height:auto!important;margin:0px!important;outline:0px!important;overflow:visible!important;padding:0px!important;vertical-align:baseline!important;width:auto!important;font-weight:bold!important;min-height:auto!important;color:rgb(51,102,153)!important;background:none!important">Item</code><code class="xml plain" style="font-family:Consolas,'Bitstream Vera Sans Mono','Courier New',Courier,monospace!important;border-radius:0px!important;border:0px!important;float:none!important;height:auto!important;margin:0px!important;outline:0px!important;overflow:visible!important;padding:0px!important;vertical-align:baseline!important;width:auto!important;min-height:auto!important;color:rgb(0,0,0)!important;background:none!important">>TLS_ECDHE.*</</code><code class="xml keyword" style="font-family:Consolas,'Bitstream Vera Sans Mono','Courier New',Courier,monospace!important;border-radius:0px!important;border:0px!important;float:none!important;height:auto!important;margin:0px!important;outline:0px!important;overflow:visible!important;padding:0px!important;vertical-align:baseline!important;width:auto!important;font-weight:bold!important;min-height:auto!important;color:rgb(51,102,153)!important;background:none!important">Item</code><code class="xml plain" style="font-family:Consolas,'Bitstream Vera Sans Mono','Courier New',Courier,monospace!important;border-radius:0px!important;border:0px!important;float:none!important;height:auto!important;margin:0px!important;outline:0px!important;overflow:visible!important;padding:0px!important;vertical-align:baseline!important;width:auto!important;min-height:auto!important;color:rgb(0,0,0)!important;background:none!important">></code></div><div class="line number21 index20 alt2" style="font-family:Consolas,'Bitstream Vera Sans Mono','Courier New',Courier,monospace;font-size:14px;color:rgb(51,51,51);margin:0px!important;padding:0px 1em 0px 0px!important;border-radius:0px!important;border:0px!important;float:none!important;height:auto!important;outline:0px!important;overflow:visible!important;vertical-align:baseline!important;width:auto!important;min-height:auto!important;white-space:nowrap!important;background-image:none!important;background-position:initial!important;background-repeat:initial!important"><code class="xml spaces" style="font-family:Consolas,'Bitstream Vera Sans Mono','Courier New',Courier,monospace!important;border-radius:0px!important;border:0px!important;float:none!important;height:auto!important;margin:0px!important;outline:0px!important;overflow:visible!important;padding:0px!important;vertical-align:baseline!important;width:auto!important;min-height:auto!important;background:none!important">          </code><code class="xml plain" style="font-family:Consolas,'Bitstream Vera Sans Mono','Courier New',Courier,monospace!important;border-radius:0px!important;border:0px!important;float:none!important;height:auto!important;margin:0px!important;outline:0px!important;overflow:visible!important;padding:0px!important;vertical-align:baseline!important;width:auto!important;min-height:auto!important;color:rgb(0,0,0)!important;background:none!important"><</code><code class="xml keyword" style="font-family:Consolas,'Bitstream Vera Sans Mono','Courier New',Courier,monospace!important;border-radius:0px!important;border:0px!important;float:none!important;height:auto!important;margin:0px!important;outline:0px!important;overflow:visible!important;padding:0px!important;vertical-align:baseline!important;width:auto!important;font-weight:bold!important;min-height:auto!important;color:rgb(51,102,153)!important;background:none!important">Item</code><code class="xml plain" style="font-family:Consolas,'Bitstream Vera Sans Mono','Courier New',Courier,monospace!important;border-radius:0px!important;border:0px!important;float:none!important;height:auto!important;margin:0px!important;outline:0px!important;overflow:visible!important;padding:0px!important;vertical-align:baseline!important;width:auto!important;min-height:auto!important;color:rgb(0,0,0)!important;background:none!important">>TLS_RSA.*</</code><code class="xml keyword" style="font-family:Consolas,'Bitstream Vera Sans Mono','Courier New',Courier,monospace!important;border-radius:0px!important;border:0px!important;float:none!important;height:auto!important;margin:0px!important;outline:0px!important;overflow:visible!important;padding:0px!important;vertical-align:baseline!important;width:auto!important;font-weight:bold!important;min-height:auto!important;color:rgb(51,102,153)!important;background:none!important">Item</code><code class="xml plain" style="font-family:Consolas,'Bitstream Vera Sans Mono','Courier New',Courier,monospace!important;border-radius:0px!important;border:0px!important;float:none!important;height:auto!important;margin:0px!important;outline:0px!important;overflow:visible!important;padding:0px!important;vertical-align:baseline!important;width:auto!important;min-height:auto!important;color:rgb(0,0,0)!important;background:none!important">></code></div><div class="line number22 index21 alt1" style="font-family:Consolas,'Bitstream Vera Sans Mono','Courier New',Courier,monospace;font-size:14px;color:rgb(51,51,51);margin:0px!important;padding:0px 1em 0px 0px!important;border-radius:0px!important;border:0px!important;float:none!important;height:auto!important;outline:0px!important;overflow:visible!important;vertical-align:baseline!important;width:auto!important;min-height:auto!important;white-space:nowrap!important;background-image:none!important;background-position:initial!important;background-repeat:initial!important"><code class="xml spaces" style="font-family:Consolas,'Bitstream Vera Sans Mono','Courier New',Courier,monospace!important;border-radius:0px!important;border:0px!important;float:none!important;height:auto!important;margin:0px!important;outline:0px!important;overflow:visible!important;padding:0px!important;vertical-align:baseline!important;width:auto!important;min-height:auto!important;background:none!important">      </code><code class="xml plain" style="font-family:Consolas,'Bitstream Vera Sans Mono','Courier New',Courier,monospace!important;border-radius:0px!important;border:0px!important;float:none!important;height:auto!important;margin:0px!important;outline:0px!important;overflow:visible!important;padding:0px!important;vertical-align:baseline!important;width:auto!important;min-height:auto!important;color:rgb(0,0,0)!important;background:none!important"></</code><code class="xml keyword" style="font-family:Consolas,'Bitstream Vera Sans Mono','Courier New',Courier,monospace!important;border-radius:0px!important;border:0px!important;float:none!important;height:auto!important;margin:0px!important;outline:0px!important;overflow:visible!important;padding:0px!important;vertical-align:baseline!important;width:auto!important;font-weight:bold!important;min-height:auto!important;color:rgb(51,102,153)!important;background:none!important">Array</code><code class="xml plain" style="font-family:Consolas,'Bitstream Vera Sans Mono','Courier New',Courier,monospace!important;border-radius:0px!important;border:0px!important;float:none!important;height:auto!important;margin:0px!important;outline:0px!important;overflow:visible!important;padding:0px!important;vertical-align:baseline!important;width:auto!important;min-height:auto!important;color:rgb(0,0,0)!important;background:none!important">></code></div><div><code class="xml spaces" style="color:rgb(51,51,51);font-size:14px;white-space:nowrap;font-family:Consolas,'Bitstream Vera Sans Mono','Courier New',Courier,monospace!important;border-radius:0px!important;border:0px!important;float:none!important;height:auto!important;margin:0px!important;outline:0px!important;overflow:visible!important;padding:0px!important;vertical-align:baseline!important;width:auto!important;min-height:auto!important;background:none!important">    </code><code class="xml plain" style="font-size:14px;white-space:nowrap;font-family:Consolas,'Bitstream Vera Sans Mono','Courier New',Courier,monospace!important;border-radius:0px!important;border:0px!important;float:none!important;height:auto!important;margin:0px!important;outline:0px!important;overflow:visible!important;padding:0px!important;vertical-align:baseline!important;width:auto!important;min-height:auto!important;color:rgb(0,0,0)!important;background:none!important"></</code><code class="xml keyword" style="font-size:14px;white-space:nowrap;font-family:Consolas,'Bitstream Vera Sans Mono','Courier New',Courier,monospace!important;border-radius:0px!important;border:0px!important;float:none!important;height:auto!important;margin:0px!important;outline:0px!important;overflow:visible!important;padding:0px!important;vertical-align:baseline!important;width:auto!important;font-weight:bold!important;min-height:auto!important;color:rgb(51,102,153)!important;background:none!important">Set</code><code class="xml plain" style="font-size:14px;white-space:nowrap;font-family:Consolas,'Bitstream Vera Sans Mono','Courier New',Courier,monospace!important;border-radius:0px!important;border:0px!important;float:none!important;height:auto!important;margin:0px!important;outline:0px!important;overflow:visible!important;padding:0px!important;vertical-align:baseline!important;width:auto!important;min-height:auto!important;color:rgb(0,0,0)!important;background:none!important">></code></div><div><br></div><div>That's a notable difference between the 9.2 and 9.3 docs. I'm not using that syntax (we use an explicit list of cipher suites) and our 9.3 IdP supports ECDHE just fine.</div><div><br></div><div>M<a href="mailto:users-unsubscribe@shibboleth.net" target="_blank"></a><br>
</div><div><br></div></div></div>