ERROR Shibboleth.SSO.SAML2 [1]: failed to decrypt assertion: Unable to resolve any key decryption keys.

[Joel Levin]

Setting up a sandbox instance of the IdP v3.2.1 and SP (all Linux).

Getting following after authentication:
ERROR Shibboleth.SSO.SAML2 [1]: failed to decrypt assertion: Unable to
resolve any key decryption keys.

Checks:

1) The IdP has correct SP metadata
2) 'sp-cert.pem' & 'sp-key.pem' have correct remissions and are in expected
path
3) The SP has correct IdP metadata

This is driving me crazy -- as installation in other environments -
production etc -0 are fime.

I'm missing something - but not sure what?
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20160829/651d8b6f/attachment-0001.html>