How to overcome javax.net.ssl.SSLPeerUnverifiedException on ldap connection

[Peter Schober]

* Patrick Brunmayr <p.brunmayr at linzag.at> [2016-08-03 13:59]:
> 2016-08-03 13:24:45,513 - ERROR
> [net.shibboleth.idp.attribute.resolver.dc.ldap.impl.ConnectionFactoryValidator:95]
> - Connection factory validation failed
> org.ldaptive.provider.ConnectionException:
> javax.net.ssl.SSLPeerUnverifiedException: hostname of the server
> '127.0.0.1' does not match the hostname in the server's certificate.

Just add the configured hostname to the IDP server's hosts file, with
the loopback interface IP address.

As for trust with a self-signed cert, have a look at
idp.authn.LDAP.sslConfig in /opt/shibboleth-idp/conf/ldap.properties

Setting that to certificateTrust and referencing the LDAP DSA's
certificate in the idp.authn.LDAP.trustCertificates property should
take care of that.

-peter