supplied TrustEngine failed to validate SSL/TLS server certificate

[Massimo Benini]

Dear Shibboleth Users,

I am facing a problem while I am trying to get attributes from the IdP 
(v3). While I can see that the IdP is releasing at least one attribute:

POST|_6a18595480acc7732cc155b38baf04dd|*beninim*|urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport||AAdzZWNyZXQxVubTawtXwku1NN5e6g4/a8G2OR/kTTWyO7evLRjzrqv9ShT83hplDT3Xt7UlQwzUNd2eQO9n4G4K7u5FF1qwO5LO3U40S47dRkWiDziFijfIjCp7c+rfQ5fAm+pppI1pNH3BCQ/K|_6ea41de9c990
3c38409e3118715a04b5|


On the SP side I got this error:

2016-11-21 14:41:33 ERROR XMLTooling.SOAPTransport.CURL [1]: supplied 
TrustEngine failed to validate SSL/TLS server certificate
2016-11-21 14:41:33 ERROR XMLTooling.SOAPTransport.CURL [1]: Certificate:
     Data:
         Version: 3 (0x2)
         Serial Number:
38:59:cb:29:3b:01:66:d3:14:12:6d:ca:31:cf:cf:91:ce:38:8d:cb
     Signature Algorithm: sha256WithRSAEncryption
         Issuer: C=BM, O=QuoVadis Limited, CN=QuoVadis Global SSL ICA G2
         Validity
             Not Before: Nov  9 07:50:12 2016 GMT
             Not After : Nov  9 07:50:09 2018 GMT
         Subject: C=CH, ST=Zuerich, L=Zuerich, O=ETH Zuerich, OU=CSCS, 
CN=idp.cscs.ch
         Subject Public Key Info:
             Public Key Algorithm: rsaEncryption
                 Public-Key: (2048 bit)
                 Modulus:

.......

2016-11-21 14:41:33 ERROR Shibboleth.AttributeResolver.Query [1]: 
exception during SAML query to 
https://idp.cscs.ch/idp/profile/SAML2/SOAP/AttributeQuery: 
CURLSOAPTransport failed while contacting SOAP endpoint 
(https://idp.cscs.ch/idp/profile/SAML2/SOAP/AttributeQuery): SSL 
certificate problem: application verification failure
2016-11-21 14:41:33 ERROR Shibboleth.AttributeResolver.Query [1]: unable 
to obtain a SAML response from attribute authority

For me the certificate provided in the metadata is correct, the issuer 
and the subjects are OK. Can you please help me to detect where is the 
problem?

Thanks

Massimo




-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20161121/82314ef4/attachment.html>