Cert Issue from SP

[Brent Putman]

On 2/1/12 4:11 PM, It Meme wrote:
>
> 13:03:38.695 - WARN
> [org.opensaml.common.binding.security.BaseSAMLSimpleSignatureSecurityPolicyRule:208]
> - There was an error evaluating the request's simple signature using
> the trust engine
> org.opensaml.xml.security.SecurityException: Error extracting
> certificates from X509Data
> 	at org.opensaml.xml.security.keyinfo.provider.InlineX509DataProvider.extractCertificates(InlineX509DataProvider.java:193)
> ~[xmltooling-1.3.0.jar:na]


>From what I can tell (and infer) it looks like you are attempting to use
the HTTP POST SimpleSign binding here?



> .....
> Caused by: java.security.cert.CertificateException: Unable to decode
> X.509 certificates
> 	at org.opensaml.xml.security.x509.X509Util.decodeCertificate(X509Util.java:320)
> ~[xmltooling-1.3.0.jar:na]
>
> .......
> Caused by: java.security.KeyStoreException: failed to extract any
> certificates or private keys - maybe bad password?
> 	at org.apache.commons.ssl.KeyStoreBuilder.parse(KeyStoreBuilder.java:436)
> ~[not-yet-commons-ssl-0.3.9.jar:na]


If it is POST SimpleSign, the error is occurring because whatever you
are sending in the KeyInfo form parameter isn't valid, specifically the
content of a child X509Data/X509Certificate element.