Having trouble with connecting to InCommon Federation SPs

[Christopher Bongaarts]

On 10/4/2013 3:23 PM, Brian Gibson wrote:
> Any thoughts on where I am going wrong? Should I be separating the 
> certificates and use the GeoTrust one just for browser traffic 
> protection and use the self signed ones that came with Shibboleth as 
> the ones I submit to InCommon?

I think you've just got a problem with the format of the key/cert files 
you're trying to use.

But your second question is a definite YES.  Use your CA-signed cert for 
browser traffic only, and use the self-signed ones that were generated 
when you installed Shib for your credential resolver, metadata, and SOAP 
back channel (usually port 8443) traffic.

-- 
%%  Christopher A. Bongaarts   %%  cab at umn.edu          %%
%%  OIT - Identity Management  %%  http://umn.edu/~cab  %%
%%  University of Minnesota    %%  +1 (612) 625-1809    %%