Shibboleth idp

[Leviton, Glyn]

Good morning.

I need some help :) i have registered my shibboleth idp multiple times. Which i believe in turn is causing some problems when testing my shibboleth idp.

As i am getting weird error messages saying :- Message was signed but signature could not be verified.  below is a sample of the error log.


15-02-28 18:32:58 DEBUG Shibboleth.SSO.SAML2 [867]: extracting issuer from SAML 2.0 assertion
2015-02-28 18:32:58 DEBUG OpenSAML.SecurityPolicyRule.MessageFlow [867]: evaluating message flow policy (replay checking on, expiration 60)
2015-02-28 18:32:58 DEBUG XMLTooling.StorageService [867]: inserted record (_421aa06d6e91f2a1473da7a8e07f7445) in context (MessageFlow) with expiration (1425166614)
2015-02-28 18:32:58 DEBUG OpenSAML.SecurityPolicyRule.XMLSigning [867]: validating signature profile
2015-02-28 18:32:58 DEBUG XMLTooling.CredentialCriteria [867]: keys didn't match
2015-02-28 18:32:58 DEBUG XMLTooling.TrustEngine.ExplicitKey [867]: unable to validate signature, no credentials available from peer
2015-02-28 18:32:58 DEBUG XMLTooling.TrustEngine.PKIX [867]: validating signature using certificate from within the signature
2015-02-28 18:32:58 DEBUG XMLTooling.TrustEngine.PKIX [867]: signature verified with key inside signature, attempting certificate validation...
2015-02-28 18:32:58 DEBUG XMLTooling.TrustEngine.PKIX [867]: checking that the certificate name is acceptable
2015-02-28 18:32:58 DEBUG XMLTooling.TrustEngine.PKIX [867]: adding to list of trusted names (https://shibboleth.carshalton.ac.uk/idp/shibboleth)
2015-02-28 18:32:58 DEBUG XMLTooling.TrustEngine.PKIX [867]: unable to match DN, trying TLS subjectAltName match
2015-02-28 18:32:58 DEBUG XMLTooling.TrustEngine.PKIX [867]: unable to match subjectAltName, trying TLS CN match
2015-02-28 18:32:58 ERROR XMLTooling.TrustEngine.PKIX [867]: certificate name was not acceptable
2015-02-28 18:32:58 ERROR OpenSAML.SecurityPolicyRule.XMLSigning [867]: unable to verify message signature with supplied trust engine
2015-02-28 18:32:58 WARN Shibboleth.SSO.SAML2 [867]: detected a problem with assertion: Message was signed, but signature could not be verified.

I think this was due to the fact i upload different idp configurations with diffrent ssl certificates.

Could some kind sole delete all my registrations please :)  i believe i registered it 5 times. The url is https://shibboleth.carshalton.ac.uk

Many thanks

Glyn

Confidentiality:  This e-mail and its attachments are intended for the above-named only and may be confidential.  If they have come to you in error you must take no action based on them, nor must you copy or show them to anyone; please reply to this e-mail and highlight the error.

Security Warning:  Please note that this e-mail has been created in 
the knowledge that e-mail is not a 100% secure communications medium.  We advise that you understand and observe this lack of security when e-mailing us.

Viruses:  Although we have taken steps to ensure that this e-mail and attachments are free from any virus, we advise that in keeping with good computing practice the recipient should ensure that they are actually virus free.

Views Expressed:  The views expressed in the e-mail are the responsibility of the individual who has sent the e-mail and do not necessarily represent the views or policies of the College. The person who has sent this e-mail is personally liable for the content of the e-mail.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20150301/88f6f453/attachment.html