MetadataResolverService Initial load failed?

[Scott Gilbert]

Installing shibboleth idp 3.4.6 and getting the idp-process.log error on
start up below. I have reviewed the documentation and none of the more
obvious solutions work. I must be missing something.



2019-11-26 14:07:11,763 -  - INFO
[net.shibboleth.utilities.java.support.service.AbstractReloadableService:173]
- Service 'shibboleth.MetadataResolverService': Performing initial load
2019-11-26 14:07:11,764 -  - INFO
[net.shibboleth.utilities.java.support.service.AbstractReloadableService:258]
- Service 'shibboleth.MetadataResolverService': Reloading service
configuration
2019-11-26 14:07:11,766 -  - INFO
[net.shibboleth.ext.spring.util.SchemaTypeAwareXMLBeanDefinitionReader:317]
- Loading XML bean definitions from file
[/opt/shibboleth-idp/conf/metadata-providers.xml]
2019-11-26 14:07:11,844 -  - INFO
[net.shibboleth.ext.spring.util.SchemaTypeAwareXMLBeanDefinitionReader:317]
- Loading XML bean definitions from file
[/opt/shibboleth-idp/system/conf/metadata-providers-system.xml]
2019-11-26 14:07:11,849 -  - INFO
[net.shibboleth.ext.spring.context.FilesystemGenericApplicationContext:583]
- Refreshing shibboleth.MetadataResolverService: startup date [Tue Nov 26
14:07:11 PST 2019]; parent: Root WebApplicationContext
2019-11-26 14:07:11,860 -  - WARN
[net.shibboleth.ext.spring.context.FilesystemGenericApplicationContext:551]
- Exception encountered during context initialization - cancelling refresh
attempt: org.springframework.beans.factory.BeanCreationException: Error
creating bean with name
'org.opensaml.saml.metadata.resolver.filter.impl.SignatureValidationFilter#0':
Cannot create inner bean '(inner bean)#2fdeaa3c' of type
[org.opensaml.xmlsec.signature.support.impl.ExplicitKeySignatureTrustEngine]
while setting constructor argument; nested exception is
org.springframework.beans.factory.BeanCreationException: Error creating
bean with name '(inner bean)#2fdeaa3c': Cannot create inner bean '(inner
bean)#2c4a78dd' of type
[org.opensaml.security.credential.impl.StaticCredentialResolver] while
setting constructor argument; nested exception is
org.springframework.beans.factory.BeanCreationException: Error creating
bean with name '(inner bean)#2c4a78dd': Cannot create inner bean '(inner
bean)#5ff6431a' of type
[net.shibboleth.idp.profile.spring.factory.BasicX509CredentialFactoryBean]
while setting constructor argument; nested exception is
org.springframework.beans.factory.BeanCreationException: Error creating
bean with name '(inner bean)#5ff6431a': Invocation of init method failed;
nested exception is org.cryptacular.StreamException: IO error
2019-11-26 14:07:11,866 -  - ERROR
[net.shibboleth.utilities.java.support.service.AbstractReloadableService:182]
- Service 'shibboleth.MetadataResolverService': Initial load failed
net.shibboleth.utilities.java.support.service.ServiceException:
org.springframework.beans.factory.BeanCreationException: Error creating
bean with name
'org.opensaml.saml.metadata.resolver.filter.impl.SignatureValidationFilter#0':
Cannot create inner bean '(inner bean)#2fdeaa3c' of type
[org.opensaml.xmlsec.signature.support.impl.ExplicitKeySignatureTrustEngine]
while setting constructor argument; nested exception is
org.springframework.beans.factory.BeanCreationException: Error creating
bean with name '(inner bean)#2fdeaa3c': Cannot create inner bean '(inner
bean)#2c4a78dd' of type
[org.opensaml.security.credential.impl.StaticCredentialResolver] while
setting constructor argument; nested exception is
org.springframework.beans.factory.BeanCreationException: Error creating
bean with name '(inner bean)#2c4a78dd': Cannot create inner bean '(inner
bean)#5ff6431a' of type
[net.shibboleth.idp.profile.spring.factory.BasicX509CredentialFactoryBean]
while setting constructor argument; nested exception is
org.springframework.beans.factory.BeanCreationException: Error creating
bean with name '(inner bean)#5ff6431a': Invocation of init method failed;
nested exception is org.cryptacular.StreamException: IO error
at
net.shibboleth.ext.spring.service.ReloadableSpringService.doReload(ReloadableSpringService.java:377)
Caused by: org.springframework.beans.factory.BeanCreationException: Error
creating bean with name
'org.opensaml.saml.metadata.resolver.filter.impl.SignatureValidationFilter#0':
Cannot create inner bean '(inner bean)#2fdeaa3c' of type
[org.opensaml.xmlsec.signature.support.impl.ExplicitKeySignatureTrustEngine]
while setting constructor argument; nested exception is
org.springframework.beans.factory.BeanCreationException: Error creating
bean with name '(inner bean)#2fdeaa3c': Cannot create inner bean '(inner
bean)#2c4a78dd' of type
[org.opensaml.security.credential.impl.StaticCredentialResolver] while
setting constructor argument; nested exception is
org.springframework.beans.factory.BeanCreationException: Error creating
bean with name '(inner bean)#2c4a78dd': Cannot create inner bean '(inner
bean)#5ff6431a' of type
[net.shibboleth.idp.profile.spring.factory.BasicX509CredentialFactoryBean]
while setting constructor argument; nested exception is
org.springframework.beans.factory.BeanCreationException: Error creating
bean with name '(inner bean)#5ff6431a': Invocation of init method failed;
nested exception is org.cryptacular.StreamException: IO error
at
org.springframework.beans.factory.support.BeanDefinitionValueResolver.resolveInnerBean(BeanDefinitionValueResolver.java:313)
Caused by: org.springframework.beans.factory.BeanCreationException: Error
creating bean with name '(inner bean)#2fdeaa3c': Cannot create inner bean
'(inner bean)#2c4a78dd' of type
[org.opensaml.security.credential.impl.StaticCredentialResolver] while
setting constructor argument; nested exception is
org.springframework.beans.factory.BeanCreationException: Error creating
bean with name '(inner bean)#2c4a78dd': Cannot create inner bean '(inner
bean)#5ff6431a' of type
[net.shibboleth.idp.profile.spring.factory.BasicX509CredentialFactoryBean]
while setting constructor argument; nested exception is
org.springframework.beans.factory.BeanCreationException: Error creating
bean with name '(inner bean)#5ff6431a': Invocation of init method failed;
nested exception is org.cryptacular.StreamException: IO error
at
org.springframework.beans.factory.support.BeanDefinitionValueResolver.resolveInnerBean(BeanDefinitionValueResolver.java:313)
Caused by: org.springframework.beans.factory.BeanCreationException: Error
creating bean with name '(inner bean)#2c4a78dd': Cannot create inner bean
'(inner bean)#5ff6431a' of type
[net.shibboleth.idp.profile.spring.factory.BasicX509CredentialFactoryBean]
while setting constructor argument; nested exception is
org.springframework.beans.factory.BeanCreationException: Error creating
bean with name '(inner bean)#5ff6431a': Invocation of init method failed;
nested exception is org.cryptacular.StreamException: IO error
at
org.springframework.beans.factory.support.BeanDefinitionValueResolver.resolveInnerBean(BeanDefinitionValueResolver.java:313)
Caused by: org.springframework.beans.factory.BeanCreationException: Error
creating bean with name '(inner bean)#5ff6431a': Invocation of init method
failed; nested exception is org.cryptacular.StreamException: IO error
at
org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.initializeBean(AbstractAutowireCapableBeanFactory.java:1631)
Caused by: org.cryptacular.StreamException: IO error
at org.cryptacular.util.CertUtil.readCertificateChain(CertUtil.java:328)
Caused by: java.io.IOException: Incomplete data
at sun.security.provider.X509Factory.readOneBlock(X509Factory.java:612)
2019-11-26 14:07:11,867 -  - ERROR
[net.shibboleth.utilities.java.support.service.AbstractReloadableService:186]
- Service 'shibboleth.MetadataResolverService': No further attempts will be
made to reload


Scott Gilbert
IAM System Admin
ETS Enterprise Technology Services
University of California Santa Barbara
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20191126/6717eb06/attachment.html>