"no signing credential resolved, leaving message unsigned"

sacha+shibboleth at ssl.co.uk sacha+shibboleth at ssl.co.uk
Wed Jun 18 19:23:04 UTC 2025


This is now resolved - thanks to those who replied.

Turned out the permissions on the signing & encryption keys were such 
that shibd couldn't read them. Not sure why it wasn't screaming about it 
into the logs, or why shibd -t didn't groan (the way it did when I 
intentionally pointed it at non-existent files or broke the password, to 
see whether it was checking those things).

Thanks Peter Schober for confirming I'm such an OAuth non-expert that I 
don't even know the difference between OAuth and SAML ;)

I'll pass your other comments about certificates and signing on to the 
IdP folk.

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20250618/76e30859/attachment.htm>


More information about the users mailing list