Archive for the ‘Apache’ Category

Fix ssl_error_rx_unexpected_change_cipher on https sites running Apache

October 28th, 2009

There is (was) a bug in OpenSSL which causes intermittent “ssl_error_rx_unexpected_change_cipher” errors on the Browser side.

Several solutions exist for this issue but the simplest one is to only add one directive to apache2.conf :

SSLSessionCache nonenotnull

References :

Posted in Apache | View Comments

Single Log Out with Mellon Apache2 module.

September 23rd, 2009

Create a simple html link to “<your-secure-location>/endpoint/logout?ReturnTo=<your-welcome-page>”

The Apache Mellon module will catch the request and contact the Identity Provider to initiate the single log out.

Posted in Apache, SAML | View Comments