SP Configuration: Certificate error.

[Atomikramp]

Sorry for the top quoting, i'm off-site and this webmail is kind of
troublesome to handle proper quoting with :)

anyway, yes i was provided with the CA certificates, not peer, and

ohh my... it was like 3am and i didn't notice the syntax error, hope this is
gonna fix it, but i won't know for a couple of hours when i get back home
for testing.

thanks for the help
Francesco



--------- Original Message --------

 Da: "Shib Users" <users at shibboleth.net>

 To: "users at shibboleth.net" <users at shibboleth.net>

 Oggetto: Re: SP Configuration: Certificate error.

 Data: 16/03/12 03:30

 

  

 

 On 3/15/12 9:32 PM, "Rampage" <atomikramp at email.it> wrote:

 >      

 >      they say to specify the SAML file as follows: (used pastebin to

 >      prevent flooding)

 >      

 >      http://pastebin.com/dpr00fcJ

 >      

 >      

 >      am i doing something wrong?

 

 No, but that metadata is invalid. There's a bogus certificate blob sitting

 in empty space and an empty X509Certificate element after it. That's the

 one triggering the error I would guess.

 

 And the order of the certs is wrong. Shibboleth does not understand

 multiple certificates inside a single KeyDescriptor, but if you do it, it

 will only look at the first one. In this case, that's a CA, not the peer's

 key.

 

 -- Scott

 


 --

 To unsubscribe from this list send an email to
users-unsubscribe at shibboleth.net

  
 
 --
 Caselle da 1GB, trasmetti allegati fino a 3GB e in piu' IMAP, POP3 e SMTP
autenticato? GRATIS solo con Email.it: http://www.email.it/f
 
 Sponsor:
 Conto Arancio al 4,20%. Zero spese e massima liberta', aprilo in due
minuti!
 Clicca qui: http://adv.email.it/cgi-bin/foclick.cgi?mid=11922&d=20120316


 
 
 --
 Caselle da 1GB, trasmetti allegati fino a 3GB e in piu' IMAP, POP3 e SMTP autenticato? GRATIS solo con Email.it http://www.email.it/f
 
 Sponsor:
 Peluche Originali Disney, Simpson, Bugs Bunny, Spongebob... a partire da soli Euro 9.90!
 Clicca qui: http://adv.email.it/cgi-bin/foclick.cgi?mid=11653&d=16-3
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20120316/394ae893/attachment.html