<html xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:Courier;
panose-1:0 0 0 0 0 0 0 0 0 0;}
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
p.MsoPlainText, li.MsoPlainText, div.MsoPlainText
{mso-style-priority:99;
mso-style-link:"Plain Text Char";
margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
span.PlainTextChar
{mso-style-name:"Plain Text Char";
mso-style-priority:99;
mso-style-link:"Plain Text";
font-family:"Calibri",sans-serif;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri",sans-serif;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style>
</head>
<body lang="EN-US" link="#0563C1" vlink="#954F72">
<div class="WordSection1">
<p class="MsoPlainText">Hi Scott,<o:p></o:p></p>
<p class="MsoPlainText"><o:p> </o:p></p>
<p class="MsoPlainText">I finally got around to trying the cipherSuites option again as you suggested below, and I can't seem to get it to work. Here are the two I've tried in the ApplicationDefaults tag with no success. The only thing that I’ve gotten to
work is the “tricky” approach using the TransportOption tag. I’m certainly not an openSSL expert, so I’m probably missing something obvious..?<o:p></o:p></p>
<p class="MsoPlainText"><o:p> </o:p></p>
<p class="MsoPlainText"><span style="font-family:Courier"> <ApplicationDefaults entityID="ourownweb-test"<o:p></o:p></span></p>
<p class="MsoPlainText"><span style="font-family:Courier"> REMOTE_USER="eppn persistent-id targeted-id"<o:p></o:p></span></p>
<p class="MsoPlainText"><span style="font-family:Courier"> cipherSuites="ALL:!aNULL:!eNULL:!LOW:!EXPORT:!RC4:!SSLv2"<o:p></o:p></span></p>
<p class="MsoPlainText"><span style="font-family:Courier"> attributePrefix="AJP_"><o:p></o:p></span></p>
<p class="MsoPlainText"><span style="font-family:Courier"><o:p> </o:p></span></p>
<p class="MsoPlainText"><span style="font-family:Courier"> --- and this one.. ---<o:p></o:p></span></p>
<p class="MsoPlainText"><span style="font-family:Courier"><o:p> </o:p></span></p>
<p class="MsoPlainText"><span style="font-family:Courier"> <ApplicationDefaults entityID="ourownweb-test"<o:p></o:p></span></p>
<p class="MsoPlainText"><span style="font-family:Courier"> REMOTE_USER="eppn persistent-id targeted-id"<o:p></o:p></span></p>
<p class="MsoPlainText"><span style="font-family:Courier"> cipherSuites="AES256-SHA"<o:p></o:p></span></p>
<p class="MsoPlainText"><span style="font-family:Courier"> attributePrefix="AJP_"><o:p></o:p></span></p>
<p class="MsoPlainText"><o:p> </o:p></p>
<p class="MsoPlainText">If you have a few minutes, could you provide an example so I can see what I might be doing wrong?<o:p></o:p></p>
<p class="MsoPlainText"><o:p> </o:p></p>
<p class="MsoPlainText">Thanks!<o:p></o:p></p>
<p class="MsoPlainText"><o:p> </o:p></p>
<p class="MsoPlainText">______________________________________<o:p></o:p></p>
<p class="MsoPlainText">David A. Gahring<o:p></o:p></p>
<p class="MsoPlainText">Systems Consultant - IT Department<o:p></o:p></p>
<p class="MsoPlainText">Palm Beach State College<o:p></o:p></p>
<p class="MsoPlainText">4200 Congress Avenue<o:p></o:p></p>
<p class="MsoPlainText">Lake Worth, FL 33461<o:p></o:p></p>
<p class="MsoPlainText">Work: 561.868.3320<o:p></o:p></p>
<p class="MsoPlainText">Cell: 904.742-5407<o:p></o:p></p>
<p class="MsoPlainText">Email: gahringd@palmbeachstate.edu<o:p></o:p></p>
<p class="MsoPlainText"><o:p> </o:p></p>
<p class="MsoPlainText"><o:p> </o:p></p>
<p class="MsoPlainText"><o:p> </o:p></p>
<p class="MsoPlainText"><o:p> </o:p></p>
<p class="MsoPlainText">On 7/10/18, 5:51 PM, "users on behalf of Cantor, Scott" <users-bounces@shibboleth.net on behalf of cantor.2@osu.edu> wrote:<o:p></o:p></p>
<p class="MsoPlainText"><o:p> </o:p></p>
<p class="MsoPlainText"> > Adding the following to the MetadataProvider section resolved the issue.<o:p></o:p></p>
<p class="MsoPlainText"> <o:p></o:p></p>
<p class="MsoPlainText"> Note that you can set cipherSuites directly in the configuration now without using tricks like that.<o:p></o:p></p>
<p class="MsoPlainText"> <o:p></o:p></p>
<p class="MsoPlainText"> -- Scott<o:p></o:p></p>
<p class="MsoPlainText"> <o:p></o:p></p>
<p class="MsoPlainText"> <o:p></o:p></p>
<p class="MsoPlainText"> <o:p></o:p></p>
<p class="MsoPlainText"> <o:p></o:p></p>
<p class="MsoPlainText"> -- <o:p></o:p></p>
<p class="MsoPlainText"> For Consortium Member technical support, see https://wiki.shibboleth.net/confluence/x/coFAAg<o:p></o:p></p>
<p class="MsoPlainText"> To unsubscribe from this list send an email to users-unsubscribe@shibboleth.net<o:p></o:p></p>
<p class="MsoPlainText"> <o:p></o:p></p>
</div>
<br>
<hr>
<font face="Arial" color="Black" size="3"><br>
Please note: Due to Florida’s broad open records law, most written communication to or from College employees is public record, available to the public and the media upon request. Therefore, this e-mail communication may be subject to public disclosure.<br>
</font>
</body>
</html>