Install woes - idp.war won't load, and idp.jks cert errors

Rod Widdowson rdw at steadingsoftware.com
Mon Dec 19 09:39:39 GMT 2011


Don't even try to use tomcat7, it isn't supported. 

> I have two problems (so far)
> 
> 1. I can't get the idp to run. The error is familiar to this list:

Is there nothing further up the Tomcat logs (or perhaps anything in the Shib logs)?

> I believe I have correctly added the ${cataline_home}/endorsed/*.jar to 
> conf/catalina.properties 

Note that RHEL 6 is known to do crazy things with the endorsed directory.  

http://groups.google.com/group/shibboleth-users/browse_thread/thread/cd0b4dbf723d2bfe/f3670bfb65fed690?lnk=gst&q=tomcat+endorsed#f36
70bfb65fed690

You state that you are using 5.6, but craziness is infectious

> "An error occurred during a connection to idp.xxxx.edu:8443.
> 
> SSL peer cannot verify your certificate.
> 
> (Error code: ssl_error_bad_cert_alert)"
> 
> 
> Again - any ideas?

This means you have configured the port correctly - that port isn't meant for browsers.  For now I'd assume that this is OK and go
back to it when you test the SAML1 flows.



More information about the users mailing list