Signature trust could not be established via PKIX validation of signing credential

Schumacher, Adam J. adamschumacher at creighton.edu
Mon Jul 15 11:22:25 EDT 2013


Bug filed.  Let me know if anything else needed.

::Adam

> -----Original Message-----
> From: users-bounces at shibboleth.net [mailto:users-
> bounces at shibboleth.net] On Behalf Of Cantor, Scott
> Sent: Friday, July 12, 2013 12:17
> To: Shib Users
> Subject: RE: Signature trust could not be established via PKIX validation of
> signing credential
> 
> > I finally noticed the problem when looking at the examples in
> > https://wiki.shibboleth.net/confluence/display/SHIB2/MetadataKeyDescri
> > pt or.  Lessons learned: RTFM.  I'm still going to blame the SP
> > though, since it was their metadata. :D
> 
> I was headed there eventually, but I keep forgetting how forgiving the IdP is
> with the XML. The SP just wouldn't load it, I don't think, schema or not.
> 
> Actually, can you file a bug on that? If nothing else maybe it can be adjusted
> in V3. The logging needs work anyway, the absence of the element shouldn't
> cause the trust engine to go silent.
> 
> -- Scott
> 
> 
> --
> To unsubscribe from this list send an email to users-
> unsubscribe at shibboleth.net



More information about the users mailing list