How do I change the certificate of a Shibboleth service provider?
Nate Klingenstein
ndk at internet2.edu
Mon Jul 23 15:09:40 EDT 2012
Chloe,
Shibboleth is not widely used with both Apache and the artifact
profile that you are trying to use, so the error in its entirety may
not be very well indexed. However, your problem is completely
independent of Shibboleth right now, so you can search for just the
error reported by the web server:
SSL3_READ_BYTES+tlsv1+alert+unknown+ca
... which should lead you to a solution like:
SSLVerifyClient optional_no_ca
SSLVerifyDepth 10
SSLOptions +StdEnvVars +ExportCertData
Documented at:
http://httpd.apache.org/docs/2.2/mod/mod_ssl.html
Pop something like that in place and give things a try. You should at
least get a new error.
Nate.
On Jul 23, 2012, at 18:39 , CHLOE SOWERS (BLOOMBERG/ 731 LEXIN) wrote:
> Naaa, there is absolutely nothing in Googledom referencing that
> error. That is why I came here.
>
> http://www.google.com/search?sourceid=chrome&ie=UTF-8&q=ERRR+Shibboleth+exception+resolving+SAML+artifact+CURLSOAPTransport+failed+while+contacting+SOAP+endpoint+error+SSL+routines+SSL3_READ_BYTES+tlsv1+alert+unknown+ca
>
> Would you happen to know which setting for Apache controls that?
> --
> To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net
More information about the users
mailing list