Validation of protocol message signature failed

[Peter Schober]

* kotesh201 <koteshwarv at gmail.com> [2013-06-28 16:35]:
> I am sending the signed AuthnRequest from SP to IDP. Shibboleth on IDP is
> throwing below error on verifying the signature.
> 
> I added my CA cert info in idp-metadata.xml file as one of the Extensions. I
> am not sure whether Shibboleth refers to this config file for signature
> verification. Is there any other config file should I modify to fix below
> error. If you need any specific information, I can provide.

In order to verify the signature on a protocol message the SP needs to
have access to the matching public key(s), with Shibboleth usually via
SAML metadata. Only adding something to the IdP's idp-metadata.xml will
not magically communicate those changes to any other party.
The SP will need to have a current copy of the IdP's metadata.
-peter