libcurl issue

[Fauchard, Pascal]

In fact, I just compiled, and installed last release of libcurl (7.21) with openssl and I still have the same error log when I am trying to get attributes.

As I verified the certificates (SP and IDP), what else should I check?

 

 ------------------------------------------------------------------------------

Pascal FAUCHARD

Conseiller 

CGI:     514-415-3000 ext: 6952

BAnQ:  514-873-1100 ext: 3300

------------------------------------------------------------------------------

 

AVIS DE CONFIDENTIALITÉ: ce message peut contenir des renseignements confidentiels appartenant exclusivement au Groupe CGI Inc. ou à ses filiales. Si vous n'êtes pas le destinataire indiqué ou prévu dans ce message (ou responsable de livrer ce message à la personne indiquée ou prévue) ou si vous pensez que ce message vous a été adressé par erreur, vous ne pouvez pas utiliser ou reproduire ce message, ni le livrer à quelqu'un d'autre.  Dans ce cas, vous devez le détruire et vous êtes prié d'avertir l'expéditeur en répondant au courriel.

CONFIDENTIALITY NOTICE: Proprietary/Confidential Information belonging to CGI Group Inc. and its affiliates may be contained in this message. If you are not a recipient indicated or intended in this message (or responsible for delivery of this message to such person), or you think for any reason that this message may have been addressed to you in error, you may not use or copy or deliver this message to anyone else. In such case, you should destroy this message and are asked to notify the sender by reply email.

 

 

________________________________

From: users-bounces at shibboleth.net [mailto:users-bounces at shibboleth.net] On Behalf Of Fauchard, Pascal
Sent: August 3, 2011 11:06 AM
To: General support list for questions related to Shibboleth
Subject: libcurl issue

 

Hi,

 

According to shibd.log, I have an issue with my certificate :

 

2011-08-03 10:31:06 ERROR XMLTooling.SOAPTransport.CURL [5]: supplied TrustEngine failed to validate SSL/TLS server certificate

2011-08-03 10:31:06 ERROR Shibboleth.AttributeResolver.Query [5]: exception during SAML query to https://intranet.banq.qc.ca/idp/profile/SAML2/SOAP/AttributeQuery: CURLSOAPTransport failed while contacting SOAP endpoint (https://intranet.banq.qc.ca/idp/profile/SAML2/SOAP/AttributeQuery): SSL certificate problem, verify that the CA cert is OK. Details:

error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed

 

I verified and even I re-created new SP certificates.

The problem is still happening.

 

I have centos 5, and according to shibboleth's documentation, there is an issue with the libcurl that come with RH6 : https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPLinuxRH6

 

I am wondering where I can find the libcurl-openssl if it could fix my problem.

Thanks.

 

 

------------------------------------------------------------------------------

Pascal

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20110803/c664b0da/attachment-0001.html 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: image/gif
Size: 73 bytes
Desc: image001.gif
Url : http://shibboleth.net/pipermail/users/attachments/20110803/c664b0da/attachment-0001.gif