Jostle and Shibboleth

[Cantor, Scott]

Actually I would speculate you might have corrupted it in the metadata creation process, causing it to validate the signature with the key it saw in the message and then fail to validate the path of the certificate. But without a more complete log trace, I'm just guessing. But that probably fits better than the alternatives. If the key in the message wasn't the one used, the error should be something different.

-- Scott