SP Configuration: Certificate error.

[Rampage]

Hello everyone
it's been a while since my last post, i've read throught many threads 
and searched on google but couldn't find anything specifically related 
to this issue, so i'm begging for your help.

here is the point:

i'm following instructions provided an IdP service to set up shibboleth 
to use the IdP for single sign on purposes.

i've followed everything accordingly but when it comes to login i get 
this error in the debug log:

2012-03-16 02:10:26 DEBUG OpenSAML.MessageDecoder.SAML1 [1]: extracting 
issuer from SAML 1.x Response
2012-03-16 02:10:26 DEBUG OpenSAML.MessageDecoder.SAML1 [1]: response 
from (https://idpcrl.crs.lombardia.it//scauth)
2012-03-16 02:10:26 DEBUG OpenSAML.MessageDecoder.SAML1 [1]: searching 
metadata for response issuer...
2012-03-16 02:10:26 DEBUG OpenSAML.SecurityPolicyRule.MessageFlow [1]: 
evaluating message flow policy (replay checking on, expiration 60)
2012-03-16 02:10:26 DEBUG XMLTooling.StorageService [1]: inserted record 
(_6419ffa3b558fbe3ccc83eed7a39910b) in context (MessageFlow)
2012-03-16 02:10:26 DEBUG OpenSAML.SecurityPolicyRule.XMLSigning [1]: 
validating signature profile
2012-03-16 02:10:26 ERROR XMLTooling.KeyInfoResolver.Inline [1]: caught 
XML-Security exception loading certificate: OpenSSL:X509 - Error 
transating Base64 DER encoding into OpenSSL X509 structure
2012-03-16 02:10:26 ERROR XMLTooling.TrustEngine.PKIX [1]: certificate 
name was not acceptable
2012-03-16 02:10:26 ERROR OpenSAML.SecurityPolicyRule.XMLSigning [1]: 
unable to verify message signature with supplied trust engine


they say to specify the SAML file as follows: (used pastebin to prevent 
flooding)

http://pastebin.com/dpr00fcJ

am i doing something wrong?
it's always been a pain with certificates and this IdP, and now recently 
they decided it was time to chance up a bunch of things and write their 
own documentation on how to set it up properly.. and obviously 
everything messed up

as i can understand there is something wrong in the trust engine? maybe 
i have to set up something in shibboleth2.xml too?

thanks in advice for the help
best regards
Francesco
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20120316/200c0f1a/attachment.html