MetadataResolverService Initial load failed?

[Scott Gilbert]

Thanks for the reply.

So this metadata provider statement is not sufficient

    <MetadataProvider id="INCOMMON"
xsi:type="FileBackedHTTPMetadataProvider"
    metadataURL="http://md.incommon.org/InCommon/InCommon-metadata.xml"
backingFile="%{idp.home}/metadata/incommon-metadata.xml">

as I recall there is some form of verification, so as not to spoof, it may
be in the incommon docs.

Scott Gilbert
IAM System Admin
ETS Enterprise Technology Services
University of California Santa Barbara



On Tue, Nov 26, 2019 at 2:44 PM Christopher Bongaarts <cab at umn.edu> wrote:

> Check the contents and permissions of your InCommon metadata validation
> certificate...
>
> On 11/26/2019 4:28 PM, Scott Gilbert wrote:
> > Caused by: org.springframework.beans.factory.BeanCreationException:
> > Error creating bean with name '(inner bean)#5ff6431a': Invocation of
> > init method failed; nested exception is
> > org.cryptacular.StreamException: IO error
> > at
> >
> org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.initializeBean(AbstractAutowireCapableBeanFactory.java:1631)
> > Caused by: org.cryptacular.StreamException: IO error
> > at org.cryptacular.util.CertUtil.readCertificateChain(CertUtil.java:328)
> > Caused by: java.io.IOException: Incomplete data
> > at sun.security.provider.X509Factory.readOneBlock(X509Factory.java:612)
> > 2019-11-26 14:07:11,867 -  - ERROR
> >
> [net.shibboleth.utilities.java.support.service.AbstractReloadableService:186]
>
> > - Service 'shibboleth.MetadataResolverService': No further attempts
> > will be made to reload
>
> --
> %%  Christopher A. Bongaarts   %%  cab at umn.edu          %%
> %%  OIT - Identity Management  %%  http://umn.edu/~cab  %%
> %%  University of Minnesota    %%  +1 (612) 625-1809    %%
>
> --
> For Consortium Member technical support, see
> https://wiki.shibboleth.net/confluence/x/coFAAg
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20191126/af1b801d/attachment.html>