Shibboleth IdP 3.0 - Signature Validation Error

[Gross, James]

I am in the process of building out a Shibboleth IdP 3.0 environment to replace our production 2.4 deployment and have run into a bit of an issue on which I'm hoping somebody on the list can offer some direction.

In order to make the transition as seamless as possible, I have re-used the self-signed credentials from the 2.4 environment for both signing and encryption. By changing my local hosts file to point to the new 3.0 environment, I have been able to verify successful authentication to all of our Service Providers but one. The SP that I have not been able to authenticate with requires a custom RelyingParty override to enable signed and encrypted assertions.

When trying to authenticate with this particular SP, I am given a signature validation error. I've enabled SAML logging within both the IdP2 and IdP3 environment and have noticed that the IdP 3.0 assertion contains a "
" after every line of the X509 certificate that is not present in the logs for the 2.0 IdP. Is it possible that this is throwing off the signature validation?

Thank you for any input or direction that you can provide.

________________________________
James Gross | Enterprise Application and CMS Developer (Enterprise Web Services)
UNC Charlotte | Information Technology Services
9201 University City Blvd. | Charlotte, NC 28223
Phone: 704-687-0298 | Office: Kennedy 301-C39
jgross15 at uncc.edu | http://www.uncc.edu
________________________________
If you are not the intended recipient of this transmission or a person responsible for delivering it to the intended recipient, any disclosure, copying, distribution, or other use of any of the information in this transmission is strictly prohibited. If you have received this transmission in error, please notify me immediately by reply e-mail or by telephone at 704-687-0298. Thank you.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20150302/92171028/attachment.html