idp.authn.LDAP.trustCertificates issue

[Youssef GHORBAL]

Hello,

	I’m trying to set idp.authn.LDAP.trustCertificates property (ldap.properties) :

## SSL configuration, either jvmTrust, certificateTrust, or keyStoreTrust
idp.authn.LDAP.sslConfig                        = certificateTrust
## If using certificateTrust above, set to the trusted certificate's path
idp.authn.LDAP.trustCertificates                = %{idp.home}/credentials/corp.paseur.fr.crt

	But when I start the IdP I have this error message :

2016-03-26 01:08:57,739 - ERROR [net.shibboleth.idp.profile.spring.relyingparty.security.credential.impl.X509ResourceCredentialFactoryBean:129] - null: could not decode CertificateFile at class path resource [opt/shibboleth-idp/credentials/corp.paseur.fr.crt]: {}
java.io.FileNotFoundException: class path resource [opt/shibboleth-idp/credentials/corp.paseur.fr.crt] cannot be resolved to URL because it does not exist
	at org.springframework.core.io.ClassPathResource.getURL(ClassPathResource.java:187)
2016-03-26 01:08:57,741 - WARN [net.shibboleth.ext.spring.context.FilesystemGenericApplicationContext:545] - Exception encountered during context initialization - cancelling refresh attempt: org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'ADPasteur': Cannot create inner bean '(inner bean)#1e0a864d' of type [org.ldaptive.DefaultConnectionFactory] while setting bean property 'connectionFactory'; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name '(inner bean)#1e0a864d': Cannot create inner bean '(inner bean)#440e3ce6' of type [org.ldaptive.ConnectionConfig] while setting constructor argument; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name '(inner bean)#440e3ce6': Cannot create inner bean '(inner bean)#4527f70a' of type [org.ldaptive.ssl.SslConfig] while setting bean property 'sslConfig'; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name '(inner bean)#4527f70a': Cannot create inner bean '(inner bean)#57435801' of type [net.shibboleth.idp.attribute.resolver.spring.dc.ldap.impl.CredentialConfigFactoryBean] while setting bean property 'credentialConfig'; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name '(inner bean)#57435801': Cannot create inner bean '(inner bean)#2da66a44' of type [net.shibboleth.idp.profile.spring.relyingparty.security.credential.impl.X509ResourceCredentialFactoryBean] while setting bean property 'trustCredential'; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name '(inner bean)#2da66a44': Invocation of init method failed; nested exception is org.springframework.beans.FatalBeanException: Could not decode provided CertificateFile: class path resource [opt/shibboleth-idp/credentials/corp.paseur.fr.crt]; nested exception is java.io.FileNotFoundException: class path resource [opt/shibboleth-idp/credentials/corp.paseur.fr.crt] cannot be resolved to URL because it does not exist

	I double checked, the file is definitely there with and permissions are OK (in /opt/shibboleth-idp/credentials/corp.paseur.fr.crt)

	What am I missing ?

Youssef

Config : IdP 3.2.1 / OpenJDK 1.8 / CentOS 7