Shibboleth SP - ECP signature error
Vincenzo Verardi
vincenzo.verardi at digitaslbi.com
Mon Nov 14 10:09:00 EST 2016
Dear All,
when I send to http://host/Shibboleth.sso/SAML2/ECP a saml2p response get signature errors:
DEBUG XMLTooling.TrustEngine.ExplicitKey [2]: attempting to validate signature with the peer's credentials
DEBUG XMLTooling.TrustEngine.ExplicitKey [2]: public key did not validate signature: Digital signature does not validate with the supplied key.
DEBUG XMLTooling.TrustEngine.ExplicitKey [2]: public key did not validate signature: Digital signature does not validate with the supplied key.
DEBUG XMLTooling.TrustEngine.ExplicitKey [2]: no peer credentials validated the signature
DEBUG XMLTooling.TrustEngine.PKIX [2]: validating signature using certificate from within the signature
DEBUG XMLTooling.TrustEngine.PKIX [2]: Digital signature does not validate with the supplied key.
DEBUG XMLTooling.TrustEngine.PKIX [2]: failed to verify signature with embedded certificates
ERROR OpenSAML.SecurityPolicyRule.XMLSigning [2]: unable to verify message signature with supplied trust engine
All certs and metadatas are ok.
Anyone can help me?
Kind regards
Vincenzo
------------------------------------------------------------------------
Disclaimer The information in this email and any attachments may contain proprietary and confidential information that is intended for the addressee(s) only. If you are not the intended recipient, you are hereby notified that any disclosure, copying, distribution, retention or use of the contents of this information is prohibited. When addressed to our clients or vendors, any information contained in this e-mail or any attachments is subject to the terms and conditions in any governing contract. If you have received this e-mail in error, please immediately contact the sender and delete the e-mail.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20161114/22bf9ca6/attachment.html>
More information about the users
mailing list