Segmentation fault (core dumped) when we add a Metadata Provider of remotely supplied batch of signed metadata in shibboleth2.xml

[Vasilis Bekos]

Hello all!

We have installed Shibboleth SP 3.3.0 in AlmaLinux 9 (RPM Install - we 
used the repository file of RHEL 8, as for RHEL 9 there is not a 
repository file). In shibboleth2.xml when we add a Metadata Provider of 
remotely supplied batch of signed metadata as below:

<MetadataProvider type="XML" validate="false" 
url="https://idp.example.com/metadata.xml" 
backingFilePath="metadata.xml" maxRefreshDelay="7200">
</MetadataProvider>

we get the following error:

# systemctl restart shibd
_Job for shibd.service failed because a fatal signal was delivered 
causing the control process to dump core._
_See "systemctl status shibd.service" and "journalctl -xeu 
shibd.service" for details._

# shibd -t
_2022-09-16 09:33:32 WARN Shibboleth.DEPRECATION : MetadataGenerator 
handler_
_Segmentation fault (core dumped)_

# systemctl status shibd

_● shibd.service - Shibboleth Service Provider Daemon_

_Loaded: loaded (... enabled; vendor preset: disabled)_

_Active: activating (auto-restart) (Result: core-dump) since ..._

Process: 51868 ExecStart=/usr/sbin/shibd -f -F (code=dumped, 
signal=SEGV)
    Main PID: 51868 (code=dumped, signal=SEGV)
         CPU: 83ms

If we add instead a Metadata Provider of locally maintained metadata as 
below:

_<MetadataProvider type="XML" validate="false" 
path="/var/cache/shibboleth/metadata.xml">_
_</MetadataProvider>_

we do't get errors.

Any ideas on the above issue are welcomed.

Thank you in advance,

Vasilis Bekos
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20220916/7585789f/attachment.htm>