Help with error:14094416:SSL routines:SSL3_READ_BYTES:sslv3 alert certificate unknown

[Coeus[TM]]

Thank you for the prompt response.

>One test is to not use a certificate at all and see if Apache will let the
>request past to the IdP and get rejected there. If the Apache server
>refuses to accept a request with no certificate, then it can't be set up
>in that fashion.

"to not use a certificate", do you mean leaving the <X509Certificate>
value to empty for both SP and Idp metadata?


>mod_ssl has no idea what metadata is. If Apache steps in, you're dead. The
>whole point is to get past it. Which is why we no longer suggest using it
>when possible.

Just wondering about what they (Idp) said that they do not have any
issues or problems
with their other SPs aside from our SP.