Shibboleth IDP startup issue

[Brent Putman]

Ok.  I personally have no idea then.  If it's really something about the
cert that OpenJDK doesn't like, I think that would be a new issue
AFAIK.  At least I have not heard of any bugs or issues there.  Since
this was the IdP's cert - were you using the one that was generated by
the IdP installer, or had you replaced it with a different one?   If so:
when you initially installed the IdP which Java were you using?



On 6/15/12 12:49 AM, Chaitana Tigadi wrote:
> Yes, it was the exact same IDP installation for which I was just
> toggling Sun Java and OpenJDK.
>
> Yesterday, I just gave one final try. I just commented out the
> security:Credential block where it uses certificate and removed all
> the reference to it in relying-party.xml file (removed the
> defaultSigningCredentialRef for AnonymousRelyingParty and
> DefaultRelyingParty) . With this change it worked with openJDK. The
> same certificate was working with Sun-java without any issue.
>
> On Fri, Jun 15, 2012 at 9:26 AM, Brent Putman <putmanb at georgetown.edu
> <mailto:putmanb at georgetown.edu>> wrote:
>
>
>
>     On 6/14/12 12:44 AM, Chaitana Tigadi wrote:
>     > Thanks Brent.. I have checked the file path and permissions.
>     > Everything seems fine. I could even get the same IDP setup working
>     > with sun-java. But it failed with open-jdk.
>     >
>
>     Well, if you're saying that the exact same IdP installation fails or
>     works when you toggle back and forth between running it with
>     Sun/Oracle
>     Java and OpenJDK, then that would be very strange.  I don't have
>     an idea
>     for that.  I'm pretty sure many people run the IdP with OpenJDK, so I
>     don't think we are aware of any particular issue there, but there
>     could
>     be one.
>
>     On the other hand, if you're just saying that you have similar IdP
>     installs that you *believe* are the same - I'd more likely suspect
>     some
>     unnoticed delta between them or other install problem that is causing
>     this.  We obviously can't look at it, so we have to take your word
>     that
>     you're checking everything you ought to check. But I'd suspect some
>     issue like that rather than some weird issue with OpenJDK.  But of
>     course the latter is possible.
>
>
>     --
>     To unsubscribe from this list send an email to
>     users-unsubscribe at shibboleth.net
>     <mailto:users-unsubscribe at shibboleth.net>
>
>
>
>
> -- 
> Regards,
> Chaitana
>
>
> --
> To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20120615/e0836f07/attachment.html