<html xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
font-size:12.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:12.0pt;
font-family:"Calibri",sans-serif;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style>
</head>
<body lang="EN-US" link="#0563C1" vlink="#954F72" style="word-wrap:break-word">
<div class="WordSection1">
<p class="MsoNormal"><span style="font-size:11.0pt">I am testing a new (upgraded from 3.4.7) Shibboleth IdP v4.0.1 environment but getting an handshake error switching to the MDQ metadata provider for InCommon.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">Any suggestions on how to resolve or additional things to troubleshoot? I can send full output of logs, was to lengthy to post it all.
<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">My environment is Shibboleth v4.01 >> Tomcat 9 >> Apache (for fronting SSL).<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">This environment does not face the outside, I am doing host file edits and using my production entityID/URL for testing by pointing it to my test shib instance.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">This method has worked for all other SPs and the file backed metdata for InCommon.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">The cert on the test box has an alias to the production idp and so does apache.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">Old config: (works)<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"> <MetadataProvider id="InCommon" xsi:type="FileBackedHTTPMetadataProvider" metadataURL="http://md.incommon.org/InCommon/InCommon-metadata.xml" backingFile="%{idp.home}/conf/metadata/InCommon-Metadata.xml"
requireValidMetadata="true" minRefreshDelay="PT5M0.000S" maxRefreshDelay="PT4H0M0.000S" connectionTimeout="PT5.000S"/><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">New config: (does not work)<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"> <MetadataProvider id="incommon" xsi:type="DynamicHTTPMetadataProvider"<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"> maxCacheDuration="PT24H" minCacheDuration="PT10M"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"> <MetadataFilter xsi:type="SignatureValidation" requireSignedRoot="true"<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"> certificateFile="%{idp.home}/credentials/inc-md-cert-mdq.pem" /><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"> <MetadataFilter xsi:type="RequiredValidUntil" maxValidityInterval="P14D" /><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"> <MetadataQueryProtocol>https://mdq.incommon.org/</MetadataQueryProtocol><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"> </MetadataProvider><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">idp-process.log<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">2020-12-14 14:29:25,383 - 10.254.0.2 - DEBUG [org.opensaml.saml.metadata.resolver.impl.AbstractDynamicMetadataResolver:748] - Metadata Resolver FunctionDrivenDynamicHTTPMetadataResolver incommon: Found entityID
in criteria: https://sso.educause.edu/sp<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">2020-12-14 14:29:25,383 - 10.254.0.2 - DEBUG [org.opensaml.saml.metadata.resolver.impl.AbstractDynamicMetadataResolver:669] - Metadata Resolver FunctionDrivenDynamicHTTPMetadataResolver incommon: Resolved
criteria to entityID: https://sso.educause.edu/sp<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">2020-12-14 14:29:25,383 - 10.254.0.2 - DEBUG [org.opensaml.saml.metadata.resolver.impl.AbstractMetadataResolver:455] - Metadata Resolver FunctionDrivenDynamicHTTPMetadataResolver incommon: Metadata backing
store does not contain any EntityDescriptors with the ID: https://sso.educause.edu/sp<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">2020-12-14 14:29:25,383 - 10.254.0.2 - DEBUG [org.opensaml.saml.metadata.resolver.impl.AbstractDynamicMetadataResolver:684] - Metadata Resolver FunctionDrivenDynamicHTTPMetadataResolver incommon: Did not find
requested metadata in backing store, attempting to resolve dynamically<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">2020-12-14 14:29:25,383 - 10.254.0.2 - DEBUG [org.opensaml.saml.metadata.resolver.impl.AbstractDynamicMetadataResolver:801] - Metadata Resolver FunctionDrivenDynamicHTTPMetadataResolver incommon: Resolving
from origin source based on entityID: https://sso.educause.edu/sp<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">2020-12-14 14:29:25,383 - 10.254.0.2 - DEBUG [org.opensaml.saml.metadata.resolver.impl.AbstractMetadataResolver:455] - Metadata Resolver FunctionDrivenDynamicHTTPMetadataResolver incommon: Metadata backing
store does not contain any EntityDescriptors with the ID: https://sso.educause.edu/sp<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">2020-12-14 14:29:25,384 - 10.254.0.2 - DEBUG [org.opensaml.saml.metadata.resolver.impl.AbstractDynamicMetadataResolver:837] - Metadata Resolver FunctionDrivenDynamicHTTPMetadataResolver incommon: Resolving
metadata dynamically for entity ID: https://sso.educause.edu/sp<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">2020-12-14 14:29:25,384 - 10.254.0.2 - DEBUG [org.opensaml.saml.metadata.resolver.impl.MetadataQueryProtocolRequestURLBuilder:138] - Criteria contained entity ID, building on that basis<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">2020-12-14 14:29:25,385 - 10.254.0.2 - DEBUG [org.opensaml.saml.metadata.resolver.impl.MetadataQueryProtocolRequestURLBuilder:167] - From entityID 'https://sso.educause.edu/sp' and base URL 'https://mdq.incommon.org/',
built request URL: https://mdq.incommon.org/entities/https:%2F%2Fsso.educause.edu%2Fsp<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">2020-12-14 14:29:25,385 - 10.254.0.2 - DEBUG [org.opensaml.saml.metadata.resolver.impl.FunctionDrivenDynamicHTTPMetadataResolver:103] - Metadata Resolver FunctionDrivenDynamicHTTPMetadataResolver incommon:
URL generated by request builder was: https://mdq.incommon.org/entities/https:%2F%2Fsso.educause.edu%2Fsp<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">2020-12-14 14:29:25,385 - 10.254.0.2 - DEBUG [org.opensaml.saml.metadata.resolver.impl.AbstractDynamicHTTPMetadataResolver:290] - Metadata Resolver FunctionDrivenDynamicHTTPMetadataResolver incommon: Built
request URL of: https://mdq.incommon.org/entities/https:%2F%2Fsso.educause.edu%2Fsp<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">2020-12-14 14:29:25,386 - 10.254.0.2 - DEBUG [org.apache.http.client.protocol.RequestAddCookies:123] - CookieSpec selected: default<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">2020-12-14 14:29:25,386 - 10.254.0.2 - DEBUG [org.apache.http.client.protocol.RequestAuthCache:77] - Auth cache not set in the context<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">2020-12-14 14:29:25,387 - 10.254.0.2 - DEBUG [org.apache.http.impl.client.cache.CachingExec:274] - Cache miss<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">2020-12-14 14:29:25,387 - 10.254.0.2 - DEBUG [org.apache.http.impl.conn.PoolingHttpClientConnectionManager:267] - Connection request: [route: {s}->https://mdq.incommon.org:443][total available: 0; route allocated:
0 of 100; total allocated: 0 of 100]<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">2020-12-14 14:29:25,387 - 10.254.0.2 - DEBUG [org.apache.http.impl.conn.PoolingHttpClientConnectionManager:312] - Connection leased: [id: 9][route: {s}->https://mdq.incommon.org:443][total available: 0; route
allocated: 1 of 100; total allocated: 1 of 100]<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">2020-12-14 14:29:25,388 - 10.254.0.2 - DEBUG [org.apache.http.impl.execchain.MainClientExec:234] - Opening connection {s}->https://mdq.incommon.org:443<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">2020-12-14 14:29:25,462 - 10.254.0.2 - DEBUG [org.apache.http.impl.conn.DefaultHttpClientConnectionOperator:139] - Connecting to mdq.incommon.org/13.225.53.15:443<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">2020-12-14 14:29:25,506 - 10.254.0.2 - DEBUG [org.apache.http.impl.conn.DefaultManagedHttpClientConnection:96] - http-outgoing-9: Shutdown connection<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">2020-12-14 14:29:25,506 - 10.254.0.2 - DEBUG [org.apache.http.impl.execchain.MainClientExec:129] - Connection discarded<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">2020-12-14 14:29:25,507 - 10.254.0.2 - DEBUG [org.apache.http.impl.conn.PoolingHttpClientConnectionManager:351] - Connection released: [id: 9][route: {s}->https://mdq.incommon.org:443][total available: 0;
route allocated: 0 of 100; total allocated: 0 of 100]<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">2020-12-14 14:29:25,514 - 10.254.0.2 - ERROR [org.opensaml.saml.metadata.resolver.impl.AbstractDynamicMetadataResolver:869] - Metadata Resolver FunctionDrivenDynamicHTTPMetadataResolver incommon: Error fetching
metadata from origin source<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">javax.net.ssl.SSLHandshakeException: Received fatal alert: handshake_failure<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"> at java.base/sun.security.ssl.Alert.createSSLException(Alert.java:131)<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">2020-12-14 14:29:25,515 - 10.254.0.2 - DEBUG [org.opensaml.saml.metadata.resolver.impl.AbstractMetadataResolver:455] - Metadata Resolver FunctionDrivenDynamicHTTPMetadataResolver incommon: Metadata backing
store does not contain any EntityDescriptors with the ID: https://sso.educause.edu/sp<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">2020-12-14 14:29:25,515 - 10.254.0.2 - DEBUG [org.opensaml.saml.metadata.resolver.impl.AbstractMetadataResolver:606] - Metadata Resolver FunctionDrivenDynamicHTTPMetadataResolver incommon: Candidates iteration
was empty, nothing to filter via predicates<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">2020-12-14 14:29:25,515 - 10.254.0.2 - DEBUG [org.opensaml.saml.metadata.resolver.impl.PredicateRoleDescriptorResolver:262] - Resolved no EntityDescriptors via underlying MetadataResolver, returning empty
collection<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">2020-12-14 14:29:25,516 - 10.254.0.2 - INFO [org.opensaml.saml.common.binding.impl.SAMLMetadataLookupHandler:167] - Message Handler: No metadata returned for https://sso.educause.edu/sp in role {urn:oasis:names:tc:SAML:2.0:metadata}SPSSODescriptor
with protocol urn:oasis:names:tc:SAML:2.0:protocol<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">2020-12-14 14:29:25,518 - 10.254.0.2 - DEBUG [net.shibboleth.idp.profile.impl.WebFlowMessageHandlerAdaptor:169] - Profile Action WebFlowMessageHandlerAdaptor: Invoking message handler of type 'org.opensaml.saml.common.binding.impl.SAMLAddAttributeConsumingServiceHandler'
on INBOUND message context<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">2020-12-14 14:29:25,518 - 10.254.0.2 - DEBUG [net.shibboleth.idp.profile.impl.WebFlowMessageHandlerAdaptor:190] - Profile Action WebFlowMessageHandlerAdaptor: Invoking message handler on message context containing
a message of type 'org.opensaml.saml.saml2.core.impl.AuthnRequestImpl'<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">2020-12-14 14:29:25,518 - 10.254.0.2 - DEBUG [org.opensaml.saml.common.binding.impl.SAMLAddAttributeConsumingServiceHandler:129] - Message Handler: No metadata context found, nothing to do<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">2020-12-14 14:29:25,525 - 10.254.0.2 - DEBUG [net.shibboleth.idp.saml.profile.impl.InitializeRelyingPartyContextFromSAMLPeer:131] - Profile Action InitializeRelyingPartyContextFromSAMLPeer: Attaching RelyingPartyContext
based on SAML peer https://sso.educause.edu/sp<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">2020-12-14 14:29:25,525 - 10.254.0.2 - DEBUG [net.shibboleth.idp.relyingparty.impl.DefaultRelyingPartyConfigurationResolver:249] - Resolving relying party configuration<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">2020-12-14 14:29:25,525 - 10.254.0.2 - DEBUG [net.shibboleth.idp.relyingparty.impl.DefaultRelyingPartyConfigurationResolver:255] - Profile request is unverified, returning configuration shibboleth.UnverifiedRelyingParty<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">2020-12-14 14:29:25,526 - 10.254.0.2 - DEBUG [net.shibboleth.idp.profile.impl.SelectRelyingPartyConfiguration:136] - Profile Action SelectRelyingPartyConfiguration: Found relying party configuration shibboleth.UnverifiedRelyingParty
for request<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">2020-12-14 14:29:25,527 - 10.254.0.2 - WARN [net.shibboleth.idp.profile.impl.SelectProfileConfiguration:118] - Profile Action SelectProfileConfiguration: Profile http://shibboleth.net/ns/profiles/saml2/sso/browser
is not available for RP configuration shibboleth.UnverifiedRelyingParty (RPID https://sso.educause.edu/sp)<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">2020-12-14 14:29:25,529 - 10.254.0.2 - WARN [org.opensaml.profile.action.impl.LogEvent:101] - A non-proceed event occurred while processing the request: InvalidProfileConfiguration<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">2020-12-14 14:29:25,530 - 10.254.0.2 - DEBUG [org.opensaml.saml.common.profile.logic.DefaultLocalErrorPredicate:142] - No SAMLBindingContext or binding URI available, error must be handled locally<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">Httdp ssl_error_log:<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">[Mon Dec 14 14:29:25.292472 2020] [ssl:info] [pid 2292570:tid 140470009173760] [client 10.254.0.2:58798] AH01964: Connection to child 8 established (server idm-shib1-test.tamucc.edu:443)<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">[Mon Dec 14 14:29:25.292719 2020] [ssl:debug] [pid 2292570:tid 140470009173760] ssl_engine_kernel.c(2384): [client 10.254.0.2:58798] AH02043: SSL virtual host for servername idp.tamucc.edu found<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">[Mon Dec 14 14:29:25.292729 2020] [ssl:debug] [pid 2292570:tid 140470009173760] ssl_engine_kernel.c(2384): [client 10.254.0.2:58798] AH02043: SSL virtual host for servername idp.tamucc.edu found<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">[Mon Dec 14 14:29:25.292732 2020] [core:debug] [pid 2292570:tid 140470009173760] protocol.c(2316): [client 10.254.0.2:58798] AH03155: select protocol from , choices=h2,http/1.1 for server idm-shib1-test.tamucc.edu<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">[Mon Dec 14 14:29:25.344707 2020] [ssl:debug] [pid 2292570:tid 140470009173760] ssl_engine_kernel.c(2269): [client 10.254.0.2:58798] AH02041: Protocol: TLSv1.3, Cipher: TLS_AES_256_GCM_SHA384 (256/256 bits)<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">[Mon Dec 14 14:29:25.344895 2020] [socache_shmcb:debug] [pid 2292570:tid 140470009173760] mod_socache_shmcb.c(495): AH00831: socache_shmcb_store (0xd3 -> subcache 19)<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">[Mon Dec 14 14:29:25.344916 2020] [socache_shmcb:debug] [pid 2292570:tid 140470009173760] mod_socache_shmcb.c(732): AH00842: expiring 1 and reclaiming 0 removed socache entries<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">[Mon Dec 14 14:29:25.344919 2020] [socache_shmcb:debug] [pid 2292570:tid 140470009173760] mod_socache_shmcb.c(751): AH00843: we now have 1 socache entries<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">[Mon Dec 14 14:29:25.344922 2020] [socache_shmcb:debug] [pid 2292570:tid 140470009173760] mod_socache_shmcb.c(849): AH00847: insert happened at idx=2, data=(437:469)<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">[Mon Dec 14 14:29:25.344924 2020] [socache_shmcb:debug] [pid 2292570:tid 140470009173760] mod_socache_shmcb.c(854): AH00848: finished insert, subcache: idx_pos/idx_used=1/2, data_pos/data_used=218/438<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">[Mon Dec 14 14:29:25.344926 2020] [socache_shmcb:debug] [pid 2292570:tid 140470009173760] mod_socache_shmcb.c(516): AH00834: leaving socache_shmcb_store successfully<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">[Mon Dec 14 14:29:25.345019 2020] [socache_shmcb:debug] [pid 2292570:tid 140470009173760] mod_socache_shmcb.c(495): AH00831: socache_shmcb_store (0x81 -> subcache 1)<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">[Mon Dec 14 14:29:25.345035 2020] [socache_shmcb:debug] [pid 2292570:tid 140470009173760] mod_socache_shmcb.c(849): AH00847: insert happened at idx=0, data=(0:32)<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">[Mon Dec 14 14:29:25.345038 2020] [socache_shmcb:debug] [pid 2292570:tid 140470009173760] mod_socache_shmcb.c(854): AH00848: finished insert, subcache: idx_pos/idx_used=0/1, data_pos/data_used=0/218<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">[Mon Dec 14 14:29:25.345041 2020] [socache_shmcb:debug] [pid 2292570:tid 140470009173760] mod_socache_shmcb.c(516): AH00834: leaving socache_shmcb_store successfully<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">[Mon Dec 14 14:29:25.345192 2020] [ssl:debug] [pid 2292570:tid 140470009173760] ssl_engine_kernel.c(422): [client 10.254.0.2:58798] AH02034: Initial (No.1) HTTPS request received for child 8 (server idm-shib1-test.tamucc.edu:443),
referer: https://apps.cirrusidentity.com/<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">[Mon Dec 14 14:29:25.345260 2020] [authz_core:debug] [pid 2292570:tid 140470009173760] mod_authz_core.c(846): [client 10.254.0.2:58798] AH01628: authorization result: granted (no directives), referer: https://apps.cirrusidentity.com/<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">[Mon Dec 14 14:29:25.345354 2020] [proxy:debug] [pid 2292570:tid 140470009173760] mod_proxy.c(1255): [client 10.254.0.2:58798] AH01143: Running scheme http handler (attempt 0), referer: https://apps.cirrusidentity.com/<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">[Mon Dec 14 14:29:25.345360 2020] [proxy_ajp:debug] [pid 2292570:tid 140470009173760] mod_proxy_ajp.c(743): [client 10.254.0.2:58798] AH00894: declining URL http://localhost:8080/idp/profile/SAML2/Redirect/SSO?SAMLRequest=fZJdT8IwFIb%2FytL7raN8DBogQbmQBANh6IU3pHZn0mRrZ09r8N%2B7DaYYI1fN%2BXifnvO2UxRlUfGFd0e9g3cP6IJTWWjkbWFGvNXcCFTItSgBuZM8XTyuOYtiXlnjjDQFuZLcVghEsE4ZTYLVckYOojfuj%2BN80k8mw9FAJHksxBjEUCb9PMlhlDelTPbjEQmewWKtnJEaVMsRPaw0OqFdnYpZHPZY2BvsWczZhLPhCwmW9TZKC9eqjs5VyClVWRU5UXopI8h8E9J6j1wVQJsxGd1BpixIR9N0Q4JFN%2FG90ehLsCnYDyXhabf%2BYSKaBiaFR2ippcl8AVF1rGhjCsXzyUIhsc123Yf67tMnCbYXK%2B%2BUzpR%2Bu%2B3i67kJ%2BcN%2Bvw23m3RP5tOGz1tX7PzfubCa0uvG6fn5U2mqGtiFl48AdrWco3IgjQXeSX%2BXu9w3gf79UPMv,
referer: https://apps.cirrusidentity.com/<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">[Mon Dec 14 14:29:25.345364 2020] [proxy_fcgi:debug] [pid 2292570:tid 140470009173760] mod_proxy_fcgi.c(1021): [client 10.254.0.2:58798] AH01076: url: http://localhost:8080/idp/profile/SAML2/Redirect/SSO?SAMLRequest=fZJdT8IwFIb%2FytL7raN8DBogQbmQBANh6IU3pHZn0mRrZ09r8N%2B7DaYYI1fN%2BXifnvO2UxRlUfGFd0e9g3cP6IJTWWjkbWFGvNXcCFTItSgBuZM8XTyuOYtiXlnjjDQFuZLcVghEsE4ZTYLVckYOojfuj%2BN80k8mw9FAJHksxBjEUCb9PMlhlDelTPbjEQmewWKtnJEaVMsRPaw0OqFdnYpZHPZY2BvsWczZhLPhCwmW9TZKC9eqjs5VyClVWRU5UXopI8h8E9J6j1wVQJsxGd1BpixIR9N0Q4JFN%2FG90ehLsCnYDyXhabf%2BYSKaBiaFR2ippcl8AVF1rGhjCsXzyUIhsc123Yf67tMnCbYXK%2B%2BUzpR%2Bu%2B3i67kJ%2BcN%2Bvw23m3RP5tOGz1tX7PzfubCa0uvG6fn5U2mqGtiFl48AdrWco3IgjQXeSX%2BXu9w3gf79UPMv
proxyname: (null) proxyport: 0, referer: https://apps.cirrusidentity.com/<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">[Mon Dec 14 14:29:25.345373 2020] [proxy_fcgi:debug] [pid 2292570:tid 140470009173760] mod_proxy_fcgi.c(1024): [client 10.254.0.2:58798] AH01077: declining URL http://localhost:8080/idp/profile/SAML2/Redirect/SSO?SAMLRequest=fZJdT8IwFIb%2FytL7raN8DBogQbmQBANh6IU3pHZn0mRrZ09r8N%2B7DaYYI1fN%2BXifnvO2UxRlUfGFd0e9g3cP6IJTWWjkbWFGvNXcCFTItSgBuZM8XTyuOYtiXlnjjDQFuZLcVghEsE4ZTYLVckYOojfuj%2BN80k8mw9FAJHksxBjEUCb9PMlhlDelTPbjEQmewWKtnJEaVMsRPaw0OqFdnYpZHPZY2BvsWczZhLPhCwmW9TZKC9eqjs5VyClVWRU5UXopI8h8E9J6j1wVQJsxGd1BpixIR9N0Q4JFN%2FG90ehLsCnYDyXhabf%2BYSKaBiaFR2ippcl8AVF1rGhjCsXzyUIhsc123Yf67tMnCbYXK%2B%2BUzpR%2Bu%2B3i67kJ%2BcN%2Bvw23m3RP5tOGz1tX7PzfubCa0uvG6fn5U2mqGtiFl48AdrWco3IgjQXeSX%2BXu9w3gf79UPMv,
referer: https://apps.cirrusidentity.com/<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">[Mon Dec 14 14:29:25.345379 2020] [proxy:debug] [pid 2292570:tid 140470009173760] proxy_util.c(2312): AH00942: HTTP: has acquired connection for (localhost)<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">[Mon Dec 14 14:29:25.345383 2020] [proxy:debug] [pid 2292570:tid 140470009173760] proxy_util.c(2365): [client 10.254.0.2:58798] AH00944: connecting http://localhost:8080/idp/profile/SAML2/Redirect/SSO?SAMLRequest=fZJdT8IwFIb%2FytL7raN8DBogQbmQBANh6IU3pHZn0mRrZ09r8N%2B7DaYYI1fN%2BXifnvO2UxRlUfGFd0e9g3cP6IJTWWjkbWFGvNXcCFTItSgBuZM8XTyuOYtiXlnjjDQFuZLcVghEsE4ZTYLVckYOojfuj%2BN80k8mw9FAJHksxBjEUCb9PMlhlDelTPbjEQmewWKtnJEaVMsRPaw0OqFdnYpZHPZY2BvsWczZhLPhCwmW9TZKC9eqjs5VyClVWRU5UXopI8h8E9J6j1wVQJsxGd1BpixIR9N0Q4JFN%2FG90ehLsCnYDyXhabf%2BYSKaBiaFR2ippcl8AVF1rGhjCsXzyUIhsc123Yf67tMnCbYXK%2B%2BUzpR%2Bu%2B3i67kJ%2BcN%2Bvw23m3RP5tOGz1tX7PzfubCa0uvG6fn5U2mqGtiFl48AdrWco3IgjQXeSX%2BXu9w3gf79UPMv
to localhost:8080, referer: https://apps.cirrusidentity.com/<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">[Mon Dec 14 14:29:25.345388 2020] [proxy:debug] [pid 2292570:tid 140470009173760] proxy_util.c(2574): [client 10.254.0.2:58798] AH00947: connected /idp/profile/SAML2/Redirect/SSO?SAMLRequest=fZJdT8IwFIb%2FytL7raN8DBogQbmQBANh6IU3pHZn0mRrZ09r8N%2B7DaYYI1fN%2BXifnvO2UxRlUfGFd0e9g3cP6IJTWWjkbWFGvNXcCFTItSgBuZM8XTyuOYtiXlnjjDQFuZLcVghEsE4ZTYLVckYOojfuj%2BN80k8mw9FAJHksxBjEUCb9PMlhlDelTPbjEQmewWKtnJEaVMsRPaw0OqFdnYpZHPZY2BvsWczZhLPhCwmW9TZKC9eqjs5VyClVWRU5UXopI8h8E9J6j1wVQJsxGd1BpixIR9N0Q4JFN%2FG90ehLsCnYDyXhabf%2BYSKaBiaFR2ippcl8AVF1rGhjCsXzyUIhsc123Yf67tMnCbYXK%2B%2BUzpR%2Bu%2B3i67kJ%2BcN%2Bvw23m3RP5tOGz1tX7PzfubCa0uvG6fn5U2mqGtiFl48AdrWco3IgjQXeSX%2BXu9w3gf79UPMv
to localhost:8080, referer: https://apps.cirrusidentity.com/<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">[Mon Dec 14 14:29:25.345608 2020] [proxy:debug] [pid 2292570:tid 140470009173760] proxy_util.c(3034): (111)Connection refused: AH00957: HTTP: attempt to connect to [::1]:8080 (localhost) failed<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">[Mon Dec 14 14:29:25.345713 2020] [proxy:debug] [pid 2292570:tid 140470009173760] proxy_util.c(3043): AH02824: HTTP: connection established with 127.0.0.1:8080 (localhost)<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">[Mon Dec 14 14:29:25.345724 2020] [proxy:debug] [pid 2292570:tid 140470009173760] proxy_util.c(3211): AH00962: HTTP: connection complete to [::1]:8080 (localhost)<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">[Mon Dec 14 14:29:25.539215 2020] [proxy:debug] [pid 2292570:tid 140470009173760] proxy_util.c(2327): AH00943: http: has released connection for (localhost)<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">[Mon Dec 14 14:29:25.539502 2020] [ssl:debug] [pid 2292570:tid 140470009173760] ssl_engine_io.c(1108): [client 10.254.0.2:58798] AH02001: Connection closed to child 8 with standard shutdown (server idm-shib1-test.tamucc.edu:443)<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">tomcat with ssl handshake debug (-Djavax.net.debug=ssl:handshake)<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">Dec 14 14:29:25 idm-shib1-test.tamucc.edu server[2297317]: javax.net.ssl|DEBUG|42|http-nio-8080-exec-8|2020-12-14 14:29:25.488 CST|SSLExtensions.java:260|Ignore, context unavailable extension: pre_shared_key<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">Dec 14 14:29:25 idm-shib1-test.tamucc.edu server[2297317]: javax.net.ssl|DEBUG|42|http-nio-8080-exec-8|2020-12-14 14:29:25.489 CST|ClientHello.java:653|Produced ClientHello handshake message (<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">Dec 14 14:29:25 idm-shib1-test.tamucc.edu server[2297317]: "ClientHello": {<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">Dec 14 14:29:25 idm-shib1-test.tamucc.edu server[2297317]: "client version" : "TLSv1.2",<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">Dec 14 14:29:25 idm-shib1-test.tamucc.edu server[2297317]: "random" : "56 64 50 A9 9A 79 1E 3D 4B BA FD 4C 68 0B 88 D4 D3 EB 40 3E 4D 70 BE 84 FF 33 52 3F EE 9B 2B 03",<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">Dec 14 14:29:25 idm-shib1-test.tamucc.edu server[2297317]: "session id" : "E9 25 EC 70 05 66 23 18 30 6D 50 EB 7B 59 15 2C 78 E9 CA 87 67 58 E7 64 62 5F BF 1C E8 1D 7A 2B",<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">Dec 14 14:29:25 idm-shib1-test.tamucc.edu server[2297317]: "cipher suites" : "[TLS_AES_128_GCM_SHA256(0x1301), TLS_AES_256_GCM_SHA384(0x1302), TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384(0xC02C), TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256(0xC02B),
TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384(0xC030), TLS_RSA_WITH_AES_256_GCM_SHA384(0x009D), TLS_DHE_RSA_WITH_AES_256_GCM_SHA384(0x009F), TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256(0xC02F), TLS_RSA_WITH_AES_128_GCM_SHA256(0x009C), TLS_DHE_RSA_WITH_AES_128_GCM_SHA256(0x009E),
TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384(0xC024), TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384(0xC028), TLS_RSA_WITH_AES_256_CBC_SHA256(0x003D), TLS_DHE_RSA_WITH_AES_256_CBC_SHA256(0x006B), TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA(0xC00A), TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA(0xC014),
TLS_RSA_WITH_AES_256_CBC_SHA(0x0035), TLS_DHE_RSA_WITH_AES_256_CBC_SHA(0x0039), TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256(0xC023), TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256(0xC027), TLS_RSA_WITH_AES_128_CBC_SHA256(0x003C), TLS_DHE_RSA_WITH_AES_128_CBC_SHA256(0x0067),
TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA(0xC009), TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA(0xC013), TLS_RSA_WITH_AES_128_CBC_SHA(0x002F), TLS_DHE_RSA_WITH_AES_128_CBC_SHA(0x0033), TLS_EMPTY_RENEGOTIATION_INFO_SCSV(0x00FF)]",<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">....<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">Dec 14 14:29:25 idm-shib1-test.tamucc.edu server[2297317]: )<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">Dec 14 14:29:25 idm-shib1-test.tamucc.edu server[2297317]: javax.net.ssl|DEBUG|42|http-nio-8080-exec-8|2020-12-14 14:29:25.504 CST|Alert.java:238|Received alert message (<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">Dec 14 14:29:25 idm-shib1-test.tamucc.edu server[2297317]: "Alert": {<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">Dec 14 14:29:25 idm-shib1-test.tamucc.edu server[2297317]: "level" : "fatal",<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">Dec 14 14:29:25 idm-shib1-test.tamucc.edu server[2297317]: "description": "handshake_failure"<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">Dec 14 14:29:25 idm-shib1-test.tamucc.edu server[2297317]: }<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">Dec 14 14:29:25 idm-shib1-test.tamucc.edu server[2297317]: )<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">Dec 14 14:29:25 idm-shib1-test.tamucc.edu server[2297317]: javax.net.ssl|ERROR|42|http-nio-8080-exec-8|2020-12-14 14:29:25.506 CST|TransportContext.java:342|Fatal (HANDSHAKE_FAILURE): Received fatal alert:
handshake_failure (<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">Dec 14 14:29:25 idm-shib1-test.tamucc.edu server[2297317]: "throwable" : {<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">Dec 14 14:29:25 idm-shib1-test.tamucc.edu server[2297317]: javax.net.ssl.SSLHandshakeException: Received fatal alert: handshake_failure<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">.......<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">Dec 14 14:29:25 idm-shib1-test.tamucc.edu server[2297317]: )<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">Dec 14 14:29:25 idm-shib1-test.tamucc.edu server[2297317]: javax.net.ssl|DEBUG|42|http-nio-8080-exec-8|2020-12-14 14:29:25.506 CST|SSLSocketImpl.java:1628|close the underlying socket<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">Dec 14 14:29:25 idm-shib1-test.tamucc.edu server[2297317]: javax.net.ssl|DEBUG|42|http-nio-8080-exec-8|2020-12-14 14:29:25.506 CST|SSLSocketImpl.java:1647|close the SSL connection (initiative)<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;color:black"> <o:p></o:p></span></p>
<p class="MsoNormal" style="background:white"><span style="font-size:11.0pt;color:black">Thanks,<o:p></o:p></span></p>
<p class="MsoNormal" style="background:white"><span style="font-size:11.0pt;color:black">Taylor<o:p></o:p></span></p>
<p class="MsoNormal" style="background:white"><b><span style="font-size:11.0pt;font-family:"Tahoma",sans-serif;color:black"> </span></b><span style="font-size:11.0pt;color:black"><o:p></o:p></span></p>
<p class="MsoNormal" style="background:white"><b><span style="font-size:11.0pt;font-family:"Tahoma",sans-serif;color:black">--------------------------------</span></b><span style="font-size:11.0pt;color:black"><o:p></o:p></span></p>
<p class="MsoNormal" style="background:white"><b><span style="font-size:11.0pt;font-family:"Tahoma",sans-serif;color:black">Taylor Hucker</span></b><span style="font-size:10.0pt;font-family:"Tahoma",sans-serif;color:black"><br>
Applications System Administrator<br>
Texas A&M University - Corpus Christi<br>
</span><span style="color:black"><a href="mailto:Taylor.Hucker@tamucc.edu"><span style="font-size:11.0pt;background:white">Taylor.Hucker@tamucc.edu</span></a></span><span style="font-size:11.0pt;color:black"><o:p></o:p></span></p>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
</body>
</html>