Shibboleth Developers

["Scott Cantor" <>]

Kaspar Brand wrote on 2009-02-05:
> If you add "disable-tlsext" to the OpenSSL config command and recompile,
> does the error disappear?

That'll take me some time to try, but...

> With the s_client commannd (from a "stock"
> 0.9.8j version), you could also try "-no_ticket" and see if that helps
> (will disable one of the TLS extensions, which might be the culprit here).

Yep. That appears to fix it (just from s_client of course).

I don't know if there's any way to get libcurl to match that option's
behavior. I suspect the extension disabling will work around it as you
suggest, if/when rebuilding is an option.

Sounds like a probable bug in the Java server code though.

Thanks,
-- Scott