sp testshib certificate validation on attribute query

[Cantor, Scott]

On 5/31/17, 10:22 AM, "users on behalf of aaaa aaaa" <users-bounces at shibboleth.net on behalf of si_976 at mail.com> wrote:

> Can you give me some hint?

Why are you messing around with queries to begin with? You probably released no attributes and your problem really has nothing to do with queries at all.

If you want the back channel to work, you would have to either configure a SOAP port with a certificate that's in the metadata or you need to alter the metadata to point those endpoints to port 443, and ensure the commercial certificate is in the metadata for that role.

I doubt you understand the distinctions here, so please read the documentation. [1]

-- Scott

[1] https://wiki.shibboleth.net/confluence/display/IDP30/SecurityAndNetworking