SP metadata: certificate for signing and encryption

Alexey strolling.code at gmail.com
Tue Jul 15 07:17:59 EDT 2014


Many thanks for such a complete answer, you really helped me.


Alexey wrote
> It does not work. 

My new metadata have not gotten to the IdP, so I use the old ones that are
not correct and get the same error - *Unable to encrypt assertion*. When the
IdP will receive new SP-metadata and if an error occurs, I will write about
it. 


 Peter Schober wrote
> You do not put any other keys in your metadata (with "open key of IDP" 
> you probably mean the IDP's public key, which is none of your SP's 
> business to publish), only your own, one, public key. 

I suggested that I need a public key of IdP for perform encrypting of
requests from SP to IdP.  These requests sent without encryption?




-----
Kind regards, Alexey
--
View this message in context: http://shibboleth.1660669.n2.nabble.com/SP-metadata-certificate-for-signing-and-encryption-tp7603709p7603740.html
Sent from the Shibboleth - Users mailing list archive at Nabble.com.


More information about the users mailing list