CURLSOAPTransport failure for SP 2.5.2 on CentOS 5.x
Scott Koranda
skoranda at gmail.com
Wed Nov 6 00:42:55 EST 2013
Hello,
I am using SP 2.5.2 on CentOS 5.x x86_64.
I have configured the SP to use the simple aggregation attribute
resolver to query a remote attribute authority. The query fails with
2013-11-05 23:23:07 ERROR Shibboleth.AttributeResolver.SimpleAggregation [2]: ex
ception during SAML query to https://myauthority.org:8443/aa/profile/SAML2/SOAP
/AttributeQuery: CURLSOAPTransport failed while contacting SOAP endpoint (https:
//myauthority.org:8443/aa/profile/SAML2/SOAP/AttributeQuery): SSL: certificate
subject name 'myhost.edu' does not match target host name 'myauthority.org'
It is true that the certificate being used by the attribute authority
has a subject name that is the host machine's canonical name
(myhost.edu) but that is not the <VirtualHost> servicing the SOAP
endpoint (myauthority.org).
Another SP 2.5.2 running on CentOS 6.x does not throw this error.
How can I configure the SP so that it does not throw an error due to
the certificate subject name being different than the <VirtualHost>?
Thanks,
Scott K
More information about the users
mailing list