SP Signature Issue

[Natarajan, Senthil]

Thanks Scott.

I already has the Idp's cert in its metadata file (idp-metadata.xml) which I use in shibboleth2.xml (on the SP side) like this

<MetadataProvider type="XML" file="idp-metadata.xml" path="idp-metadata.xml">
 </MetadataProvider>

I will separately send you the "idp-metadata.xml"

Senthil

-----Original Message-----
From: users-bounces at shibboleth.net [mailto:users-bounces at shibboleth.net] On Behalf Of Cantor, Scott
Sent: Wednesday, October 05, 2011 11:41 AM
To: users at shibboleth.net
Subject: Re: SP Signature Issue

On 10/5/11 11:34 AM, "Natarajan, Senthil" <senthil at pitt.edu> wrote:
>Do I need to copy the root CA certificate or something from Idp to SP 
>and need to configure in shibboleth2.xml? (Both SP and Idp certificates 
>are
>self-signed)
> 
>Could you please provide some pointer to fix this signature issue?

Put the IdP's cert into its metadata you give to the SP. That's it.

-- Scott

--
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net