Help with error:14094416:SSL routines:SSL3_READ_BYTES:sslv3 alert certificate unknown

[Cantor, Scott]

>
>"to not use a certificate", do you mean leaving the <X509Certificate>
>value to empty for both SP and Idp metadata?

No, I mean initiating a TLS handshake with openssl or some other client
tool with no client cert. This is a low level problem. There are no high
level solutions or steps. It's dirty and highly technical.

>Just wondering about what they (Idp) said that they do not have any
>issues or problems with their other SPs aside from our SP.

Not using SOAP at all, or not encountering whatever mod_ssl error
condition is triggered by this certificate. They could be imposing
certificate constraints on every other SP and just sticking a CA into the
root list. Unless they're supporting existing self-signed certs on those
SPs, it isn't even worth asking.

They also have logs. What do they say? mod_ssl often logs specifics when
it rejects a cert.

-- Scott