CURLSOAPTransport failure for SP 2.5.2 on CentOS 5.x

Peter Schober peter.schober at univie.ac.at
Wed Nov 6 03:16:02 EST 2013


* Scott Koranda <skoranda at gmail.com> [2013-11-06 06:43]:
> It is true that the certificate being used by the attribute authority
> has a subject name that is the host machine's canonical name
> (myhost.edu) but that is not the <VirtualHost> servicing the SOAP
> endpoint (myauthority.org).

Why not change the metadata so that the FQDN used for the AA matches
the TLS/SSL cert's subject (or vice versa)? Or replace the cert with
one that lists all host names in the X.509v3 SubjectAltName extension?
-peter


More information about the users mailing list