SP Configuration: Certificate error.

[Cantor, Scott]

On 3/15/12 9:32 PM, "Rampage" <atomikramp at email.it> wrote:
>      
>      they say to specify the SAML file as follows: (used pastebin to
>      prevent flooding)
>      
>      http://pastebin.com/dpr00fcJ
>      
>      
>      am i doing something wrong?

No, but that metadata is invalid. There's a bogus certificate blob sitting
in empty space and an empty X509Certificate element after it. That's the
one triggering the error I would guess.

And the order of the certs is wrong. Shibboleth does not understand
multiple certificates inside a single KeyDescriptor, but if you do it, it
will only look at the first one. In this case, that's a CA, not the peer's
key.

-- Scott