using a chain cert with LDAP connector?

[Cameron Kerr]

All you need is to put the CA that issued your certificate in your JDK's jre/lib/security/cacerts file

Sent from my iPhone

On 25/03/2014, at 6:55 am, "Liam Hoekenga" <liamr at umich.edu<mailto:liamr at umich.edu>> wrote:

Did you try several <security:Certificate> elements or having more
than once certificate in the file (in both possible orders)?

Looks like I need one file with all of the certs in the chain (the cert for the LDAP server, intermediary CA, and the top level root CA).

Liam


On Mon, Mar 24, 2014 at 12:43 PM, Cantor, Scott <cantor.2 at osu.edu<mailto:cantor.2 at osu.edu>> wrote:
On 3/24/14, 12:39 PM, "Peter Schober" <peter.schober at univie.ac.at<mailto:peter.schober at univie.ac.at>> wrote:
>
>Whether there's a way to use <StartTLSTrustCredential> to configure a
>certificate chain for use inside a DataConnector I don't know.

I don't either, but as a general matter, make sure the LDAP server is
doing things correctly and returning at least all but the final root CA.
It should only be necessary to include the CA in the local trust store.

-- Scott


--
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net<mailto:users-unsubscribe at shibboleth.net>

--
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net<mailto:users-unsubscribe at shibboleth.net>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20140324/947f504f/attachment-0001.html