shibboleth2.4 configuration error
Peter Schober
peter.schober at univie.ac.at
Fri Nov 22 13:31:47 EST 2013
* jfu <jfu_gengyue at hotmail.com> [2013-11-22 19:24]:
> 11:54:55.414 - ERROR
> [edu.internet2.middleware.shibboleth.common.config.BaseService:188] -
> Configuration was not loaded for shibboleth.RelyingPartyConfigurationManager
> service, error creating components. The root cause of this error was:
> org.opensaml.saml2.metadata.provider.FilterException: Signature trust
> establishment failed for metadata entry.
>
> If I replace saml.crt with saml.pem, I got uninitialized keystore
> error.
I cannot know what saml.crt and saml.pem are and whether they are the
right keys for verifying that metadata. You can look at the files with
a pager/text editor or openssl. Maybe download the metadata from the
SP and check the signature with some other tool first, cf.
https://wiki.shibboleth.net/confluence/display/SHIB2/MetadataCorrectness#MetadataCorrectness-SignatureVerification
-peter
More information about the users
mailing list