PKIX path building failed

[Dave Bartholomew]

>Since it has to be turned on explicitly, though, I doubt that this is
relevant to troubleshooting the OP's issue.

It's not, but thanks for the info.



>USERTrust RSA Certification Authority (root, self-signed, but not included
in root CA list for browsers)

Correction: it is included. Not sure how I missed that one (except that
I’ve been getting cross-eyed looking at this). This explains ldp.exe
working.



Simple explanation:

The dev AD certificate was changed (new root not in Shib trust store),
unknown to me (old screen shots can be handy).



Scott/Brent – thanks for your help, I learned a few new things along the
way.



--Dave
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20161030/84ec6ceb/attachment.html>