CURLSOAPTransport failure for SP 2.5.2 on CentOS 5.x

Scott Koranda skoranda at gmail.com
Wed Nov 6 00:42:55 EST 2013


Hello,

I am using SP 2.5.2 on CentOS 5.x x86_64.

I have configured the SP to use the simple aggregation attribute
resolver to query a remote attribute authority. The query fails with

2013-11-05 23:23:07 ERROR Shibboleth.AttributeResolver.SimpleAggregation [2]: ex
ception during SAML query to https://myauthority.org:8443/aa/profile/SAML2/SOAP
/AttributeQuery: CURLSOAPTransport failed while contacting SOAP endpoint (https:
//myauthority.org:8443/aa/profile/SAML2/SOAP/AttributeQuery): SSL: certificate
subject name 'myhost.edu' does not match target host name 'myauthority.org'

It is true that the certificate being used by the attribute authority
has a subject name that is the host machine's canonical name
(myhost.edu) but that is not the <VirtualHost> servicing the SOAP
endpoint (myauthority.org).

Another SP 2.5.2 running on CentOS 6.x does not throw this error.

How can I configure the SP so that it does not throw an error due to
the certificate subject name being different than the <VirtualHost>?

Thanks,

Scott K


More information about the users mailing list