Install woes - idp.war won't load, and idp.jks cert errors

[Brendan Murray]

I've been working on this for months, and clearly have some basic
misunderstanding. So finally I've come to this list for help.

I am running Red Hat Enterprise Linux Server release 5.6 (Tikanga)
I have downloaded and installed with install.sh from
shibboleth-identityprovider-2.3.5-bin.zip

I have installed from source both apache-tomcat-6.0.33.tar.gz  and
apache-tomcat-7.0.16.tar.gz -  tomcat6 isn't directly available for
yum install


I have two problems (so far)

1. I can't get the idp to run. The error is familiar to this list:

Dec 19, 2011 1:41:41 PM org.apache.catalina.core.StandardContext listenerStart
SEVERE: Exception sending context initialized event to listener
instance of class org.spr
ingframework.web.context.ContextLoaderListener
org.springframework.beans.factory.BeanCreationException: Error
creating bean with name 's
hibboleth.MessageDecoders': Cannot create inner bean
'shibboleth.UnsolicitedSSODecoder' o
f type [edu.internet2.middleware.shibboleth.idp.profile.saml2.UnsolicitedSSODecoder]
whil
e setting bean property 'sourceMap' with key [TypedStringValue: value
[urn:mace:shibbolet
h:2.0:profiles:AuthnRequest], target type [null]]; nested exception is
org.springframewor
k.beans.factory.CannotLoadBeanClassException: Cannot find class
[edu.internet2.middleware
.shibboleth.idp.profile.saml2.UnsolicitedSSODecoder] for bean with
name 'shibboleth.Unsol
icitedSSODecoder' defined in URL
[file:/opt/shibboleth-idp/conf/internal.xml]; nested exc
eption is java.lang.ClassNotFoundException:
edu.internet2.middleware.shibboleth.idp.profi
le.saml2.UnsolicitedSSODecoder

I believe I have correctly added the ${cataline_home}/endorsed/*.jar
to conf/catalina.properties
I'm using the http connector in server.xml on port 8080 routing to 8443
I'm using a commercial cerfificate for SSL (though that all works)

Can someone suggest where I need to look for this?


2. A bit later on, just trying to make sure that I can connect to
https://idp:8443, using this definition in server.xml

 <Connector port="8443"
          protocol="HTTP/1.1"
          maxThreads="200"
          scheme="https"
          SSLEnabled="true"
          sslProtocol="TLS"
          clientAuth="true"
          keystoreFile="/opt/shibboleth-idp/credentials/idp.jks"
          keystorePass="obfuscatory"/>

I get

"idp.otago.ac.nz:8443 uses an invalid security certificate.

The certificate is not trusted because it is self-signed.

(Error code: sec_error_ca_cert_invalid)"

Now self signed ought to be OK?  SO I accept it and get

"An error occurred during a connection to idp.xxxx.edu:8443.

SSL peer cannot verify your certificate.

(Error code: ssl_error_bad_cert_alert)"


Again - any ideas?


thanks anyone for anything that gets me moving a bit more forward.