Service provider unable to load private key from file

Brian Reindel brian at reindel.com
Mon Sep 16 12:12:59 EDT 2013


The shibd service starts, but when I run shibd -t I now get the following error:

2013-09-16 12:04:29 ERROR OpenSSL : error code: 33558541 in bss_file.c, line 355
2013-09-16 12:04:29 ERROR OpenSSL : error data:
fopen('/etc/shibboleth/sp-key.pem','r')
2013-09-16 12:04:29 ERROR OpenSSL : error code: 537346050 in
bss_file.c, line 357
2013-09-16 12:04:29 CRIT Shibboleth.Application : error building
CredentialResolver: Unable to load private key from file
(/etc/shibboleth/sp-key.pem).

I've used keygen to get a new key/cert thinking they may have been
corrupted, but that still doesn't work.

The permissions are as follows:

-rw-r--r--. 1 root root  1062 Sep 16 11:20 sp-cert.pem
-rw-------. 1 root root  1704 Sep 16 11:20 sp-key.pem

The SP fails after login with the "A valid authentication statement
was not found in the incoming message." error, and in the log it
states the same error as above.


More information about the users mailing list