Shibboleth Developers

["Scott Cantor" <>]

André Cruz wrote on 2009-02-05:
> I don't have any system with 0.9.8j yet. I'll have to find time to
> install it and try. Which version of the JDK are you using?

Latest 1.6 patch.

> For the record, what happens?

C> openssl.exe s_client -connect hostname:443 -no_ssl2
CONNECTED(00000003)
2272:error:140773F2:SSL routines:SSL23_GET_SERVER_HELLO:sslv3 alert
unexpected message:s23_clnt.c:596:

C> openssl.exe s_client -connect hostname:443 -tls1
CONNECTED(00000003)
5624:error:140943F2:SSL routines:SSL3_READ_BYTES:sslv3 alert unexpected
message:s3_pkt.c:1060:SSL alert number 105624:error:1409E0E5:SSL
routines:SSL3_WRITE_BYTES:ssl handshake failure:s3_pkt.c:530:

C> openssl.exe s_client -connect hostname:443 -ssl3
CONNECTED(00000003)
4316:error:1408F10B:SSL routines:SSL3_GET_RECORD:wrong version
number:s3_pkt.c:284:

Omitting those options, or adding no_ticket allows it to handshake
successfully.

> Also, you mention using tomcat 6.0. I was under the impression that
> the IDP 1.3 required jdk 5 and tomcat <= 5.5. Does it work well?

I can't imagine any up to date advice of that nature. I doubt this is Tomcat
influenced, though it could be JDK influenced. Kind of doubt that too
though.

-- Scott