[SOLVED] Re: error while fetching metadata (using shibd -t)
Martin Haase
Martin.Haase at DAASI.de
Fri Sep 21 07:12:09 EDT 2012
Hi Timo,
thanks, perfect. That fixes it.
Cheers,
Martin
Am 21.09.2012 12:56, schrieb Timo Tunturi:
> On 9/21/12 1:44 PM, Martin Haase wrote:
>> Hi Guys,
>>
>> not just a real problem, however, wanted to share this. shibd -t outputs
>> this:
>>
>> 2012-09-21 12:17:11 ERROR XMLTooling.libcurl.InputStream : error while
>> fetching https://metadata-server/metadata.xml: (59) Unknown cipher in
>> list: ALL:!aNULL:!LOW:!EXPORT:!SSLv2
>> The funny thing is, from shibd.log, the SP is very well able to fetch
>> the metadata, and tell if they have changed, etc. The SP is 2.5.0, both
>> systems run RHEL 6.3, libcurl-openssl is installed on the SP, and the
>> metadata server has a real certificate.
>>
> Linker probably doesn't link to the proper curl-library. In the standard
> shibd init script there is a kind of a fix for that, but when you invoke
> the shibd binary directly, things work a bit differently.
>
> ---clip---
> export LD_LIBRARY_PATH=/opt/shibboleth/lib64:$LD_LIBRARY_PATH
> ---clip---
>
--
-----------------------------------------------------------------------
Dr. Martin Haase
DAASI International GmbH phone: +49 7071 407109-6
Europaplatz 3 Fax : +49 7071 407109-9
D-72072 Tübingen email: Martin.Haase at DAASI.de
Germany Web : http://www.daasi.de
Directory Applications for Advanced Security and Information Management
-----------------------------------------------------------------------
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 2345 bytes
Desc: S/MIME Kryptografische Unterschrift
Url : http://shibboleth.net/pipermail/users/attachments/20120921/024bc0a0/attachment.bin
More information about the users
mailing list