shibboleth2.4 configuration error

[jfu]

Hi,

saml.crt and saml.pem are given by our Service Provider.

I openned saml.crt and saml.pem using text editor.

saml.crt is like this:

-----BEGIN CERTIFICATE-----

// content here
-----END CERTIFICATE-----

saml.pem is like this:

-----BEGIN RSA PRIVATE KEY-----
// content here
-----END RSA PRIVATE KEY-----

So I change trustEngine configuration to this

<security:TrustEngine id="shibboleth.SPMetadataTrustEngine" 
xsi:type="security:StaticExplicitKeySignature">
     <security:Credential id="SPCredentials"
xsi:type="security:X509Filesystem">
            
<security:PrivateKey>/opt/shibboleth-idp/credentials/saml.pem</security:PrivateKey>
           
<security:Certificate>/opt/shibboleth-idp/credentials/saml.crt</security:Certificate>
        </security:Credential>
    </security:TrustEngine>

I still got the same error.

I download metadata from the URL and open it. the encrypted code
between<ds:X509Certificate></ds:X509Certificate>is different from saml.crt.
I am not sure if they need to be the same.

Please advise. Thank you.






--
View this message in context: http://shibboleth.1660669.n2.nabble.com/shibboleth2-4-configuration-error-tp7591617p7591708.html
Sent from the Shibboleth - Users mailing list archive at Nabble.com.