using a chain cert with LDAP connector?

[Liam Hoekenga]

>
> Did you try several <security:Certificate> elements or having more
> than once certificate in the file (in both possible orders)?


Looks like I need one file with all of the certs in the chain (the cert for
the LDAP server, intermediary CA, and the top level root CA).

Liam


On Mon, Mar 24, 2014 at 12:43 PM, Cantor, Scott <cantor.2 at osu.edu> wrote:

> On 3/24/14, 12:39 PM, "Peter Schober" <peter.schober at univie.ac.at> wrote:
> >
> >Whether there's a way to use <StartTLSTrustCredential> to configure a
> >certificate chain for use inside a DataConnector I don't know.
>
> I don't either, but as a general matter, make sure the LDAP server is
> doing things correctly and returning at least all but the final root CA.
> It should only be necessary to include the CA in the local trust store.
>
> -- Scott
>
>
> --
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20140324/f3607cc0/attachment.html