How do I change the certificate of a Shibboleth service provider?

Nate Klingenstein ndk at internet2.edu
Mon Jul 23 15:09:40 EDT 2012


Chloe,

Shibboleth is not widely used with both Apache and the artifact  
profile that you are trying to use, so the error in its entirety may  
not be very well indexed.  However, your problem is completely  
independent of Shibboleth right now, so you can search for just the  
error reported by the web server:

SSL3_READ_BYTES+tlsv1+alert+unknown+ca

... which should lead you to a solution like:

     SSLVerifyClient optional_no_ca
     SSLVerifyDepth 10
     SSLOptions +StdEnvVars +ExportCertData

Documented at:

http://httpd.apache.org/docs/2.2/mod/mod_ssl.html

Pop something like that in place and give things a try.  You should at  
least get a new error.
Nate.

On Jul 23, 2012, at 18:39 , CHLOE SOWERS (BLOOMBERG/ 731 LEXIN) wrote:

> Naaa, there is absolutely nothing in Googledom referencing that  
> error. That is why I came here.
>
> http://www.google.com/search?sourceid=chrome&ie=UTF-8&q=ERRR+Shibboleth+exception+resolving+SAML+artifact+CURLSOAPTransport+failed+while+contacting+SOAP+endpoint+error+SSL+routines+SSL3_READ_BYTES+tlsv1+alert+unknown+ca
>
> Would you happen to know which setting for Apache controls that?
> --
> To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net



More information about the users mailing list