SP is not accepting the certificate of the IDP

[Yasser Afifi]

Hello

Thanks a lot for all your great help.

My SP was working fine with my IDP, then i deployed them on an Ubuntu test
server. IDP created a certificate while being installed that had the
hostname in it. I then changed my DNS name but the certificate is still
issued to old hostname. But this makes the SP not accepting the assertion
from the IDP.
How can I solve this? How can i make the IDP create a new certificate for
the new hostname?
I tried using the keygen tool and supplied --hostname myHostName but it
doesn't create new certificates!

the error i get is Unable to establish security of incoming assertion

I got this same problem before on windows and i changed the hostname and
reinstalled shibboleth idp and it generated certificates for the new name
and the problem was solved. But i can't really do that on Ubuntu server!

How can I solve this problem?

Thanks a lot
Yasser
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20160129/9dcad129/attachment.html>