shibboleth-dev - Re: [Shib-Dev] OpenSSL 0.9.8j and Tomcat

Subject: Shibboleth Developers

List archive

Re: [Shib-Dev] OpenSSL 0.9.8j and Tomcat

From: Kaspar Brand <>
To:
Subject: Re: [Shib-Dev] OpenSSL 0.9.8j and Tomcat
Date: Thu, 05 Feb 2009 15:29:11 +0100

>> With the s_client commannd (from a "stock"
>> 0.9.8j version), you could also try "-no_ticket" and see if that helps
>> (will disable one of the TLS extensions, which might be the culprit here).
>
> Yep. That appears to fix it (just from s_client of course).
>
> I don't know if there's any way to get libcurl to match that option's
> behavior.

Upgrade to HEAD, yes :-) See the (recent) commit for r1.215:

http://cool.haxx.se/cvs.cgi/curl/lib/ssluse.c

They now disable the ticket extension by default (through OpenSSL's
SSL_OP_NO_TICKET option).

Kaspar

OpenSSL 0.9.8j and Tomcat, Scott Cantor, 02/04/2009
- Re: [Shib-Dev] OpenSSL 0.9.8j and Tomcat, Kaspar Brand, 02/05/2009
  - RE: [Shib-Dev] OpenSSL 0.9.8j and Tomcat, Scott Cantor, 02/05/2009
    - Re: [Shib-Dev] OpenSSL 0.9.8j and Tomcat, Kaspar Brand, 02/05/2009
      - RE: [Shib-Dev] OpenSSL 0.9.8j and Tomcat, Scott Cantor, 02/05/2009
      - RE: [Shib-Dev] OpenSSL 0.9.8j and Tomcat, Scott Cantor, 02/05/2009
- Re: [Shib-Dev] OpenSSL 0.9.8j and Tomcat, André Cruz, 02/05/2009
  - RE: [Shib-Dev] OpenSSL 0.9.8j and Tomcat, Scott Cantor, 02/05/2009
    - Re: [Shib-Dev] OpenSSL 0.9.8j and Tomcat, André Cruz, 02/05/2009
      - Re: [Shib-Dev] OpenSSL 0.9.8j and Tomcat, André Cruz, 02/06/2009
        
        Re: [Shib-Dev] OpenSSL 0.9.8j and Tomcat, Kaspar Brand, 02/06/2009
    - Re: [Shib-Dev] OpenSSL 0.9.8j and Tomcat, André Cruz, 02/05/2009
      - RE: [Shib-Dev] OpenSSL 0.9.8j and Tomcat, Scott Cantor, 02/05/2009

List archive

Re: [Shib-Dev] OpenSSL 0.9.8j and Tomcat