supplied TrustEngine failed to validate SSL/TLS server certificate

[Massimo Benini]

Thanks Scott,


> It is not, that's why the SP is querying. You can't fix an attribute release problem by "fixing" the query. The IdP decision is the problem.


How can you make the IdP decide to release attributes? Is it in the 
relying-party.xml file?

This is my snippet of that file:

<bean id="shibboleth.DefaultRelyingParty" parent="RelyingParty">
         <property name="profileConfigurations">
             <list>
                 <bean parent="Shibboleth.SSO" 
p:postAuthenticationFlows="attribute-release" />
                 <ref bean="SAML1.AttributeQuery" />
                 <ref bean="SAML1.ArtifactResolution" />
                 <bean parent="SAML2.SSO" 
p:postAuthenticationFlows="attribute-release" />
                 <ref bean="SAML2.ECP" />
                 <ref bean="SAML2.Logout" />
                 <ref bean="SAML2.AttributeQuery" />
                 <ref bean="SAML2.ArtifactResolution" />
             </list>
         </property>
     </bean>