Help with error:14094416:SSL routines:SSL3_READ_BYTES:sslv3 alert certificate unknown

[Cantor, Scott]

> I am running a Shibboleth SP ver. 2.1.0 but tries to connect to a SAML
> 1 endpoint where I believe these 2 different Idp's already defined an
> SAML 2 endpoint in their metadata.

But the SSO protocol used is SAML 1, and that means the query will be too.

> What should I need to reconfigure so that the SP will connect to the
> SAML 2 endpoint?

No idea, depends how your invoking things. If you're using a legacy WAYF, you can't. If there's a DS or you're doing something else, it should automatically select SAML 2 if that's earlier in the list of protocols or SessionInitiators.

And lastly, you'd better not be using SP V2.1, because that is vulnerable to attack.

-- Scott