rpm-update shibboleth from version 2 to version 3

William Chan wchan999 at gmail.com
Thu Jan 31 17:55:51 EST 2019


Recently I rpm-updated shibboleth-2.6.1-3.1.x86_64 to
shibboleth-3.0.3-1.1.x86_64 on one of my CentOS 6 machines. I noticed the
following messages :

In /var/log/shibboleth/hibd.log :

2018-12-19 19:52:25 ERROR OpenSSL : error code: 33558530 in bss_file.c,
line 398
2018-12-19 19:52:25 ERROR OpenSSL : error data:
fopen('/etc/shibboleth/sp-signing-key.pem','r')
2018-12-19 19:52:25 ERROR OpenSSL : error code: 537346050 in bss_file.c,
line 400
2018-12-19 19:52:25 ERROR XMLTooling.CredentialResolver.Chaining : caught
exception processing embedded CredentialResolver element: Unable to load
private key from file (/etc/shibboleth/sp-signing-key.pem).

2018-12-19 19:52:25 ERROR OpenSSL : error code: 33558530 in bss_file.c,
line 398
2018-12-19 19:52:25 ERROR OpenSSL : error data:
fopen('/etc/shibboleth/sp-encrypt-key.pem','r')
2018-12-19 19:52:25 ERROR OpenSSL : error code: 537346050 in bss_file.c,
line 400
2018-12-19 19:52:25 ERROR XMLTooling.CredentialResolver.Chaining : caught
exception processing embedded CredentialResolver element: Unable to load
private key from file (/etc/shibboleth/sp-encrypt-key.pem).

--------------------------------------------------------------------------------------------------

In /etc/shibboleth, there are sp-cert.pem and sp-key.pem, but no
sp-signing-key.pem
nor sp-encrypt-key.pem.

However, the web site seems to be running fine with shibboleth. SHOULD I BE
CONCERNED WITH THE ABOVE EROOR MESSAGES ??
ARE THERE SOME OPTIONS NOT SET UP CORRECTLY ??
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20190131/2b4b87c4/attachment.html>


More information about the users mailing list