vwbusguy

For what it’s worth, on the SSL handshake issue, I found it was caused by a recent openssl patch in the wake of POODLE that caused the running mod_ssl to be outdated with the server openssl. A restart of Apache fixed it.

If it’s helpful, I had the same issue. It was sending a non-SSL service to CAS and CAS sent back to validation by http:// … :443 , so non-SSL on port 443, which caused Apache to error and CAS to not get the ticket validation. The issue seems to stem from the implementation of phpCAS. I managed to fix it with a hack on cas-mastro/phpCAS/CAS/Client.php on line 3055: $final_uri = ‘https’; The getURL() for some reason wasn’t adding https even with the login.php being forced over SSL. I’ve never seen this issue with phpCAS before, but SSL should generally be used for logins, even to secured CAS, so that the session cookie value isn’t grabbed.