Help with error:14094416:SSL routines:SSL3_READ_BYTES:sslv3 alert certificate unknown

[Cantor, Scott]

On 2/14/12 9:10 PM, "Coeus[TM]" <coeus.ph at gmail.com> wrote:
>
>I only have the snippet below from their shibd.log

That's an IdP log, and there's nothing the IdP can do about mod_ssl. There
can be nothing in it by definition.

>They also advised me to read the link below and suggested to apply the
>workarounds (OpenSSL re-enable "unsafe" or upgrade or downgrade
>version):
>https://wiki.shibboleth.net/confluence/display/SHIB2/SSL+Renegotiation

That causes timeouts, not certificate rejection.

If they won't fix their IdP, then your only choice is to live with their
restrictions on certificates and change what you're using, or switch to
message signing.

-- Scott