"no signing credential resolved, leaving message unsigned"
sacha+shibboleth at ssl.co.uk
sacha+shibboleth at ssl.co.uk
Wed Jun 18 19:23:04 UTC 2025
This is now resolved - thanks to those who replied.
Turned out the permissions on the signing & encryption keys were such
that shibd couldn't read them. Not sure why it wasn't screaming about it
into the logs, or why shibd -t didn't groan (the way it did when I
intentionally pointed it at non-existent files or broke the password, to
see whether it was checking those things).
Thanks Peter Schober for confirming I'm such an OAuth non-expert that I
don't even know the difference between OAuth and SAML ;)
I'll pass your other comments about certificates and signing on to the
IdP folk.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20250618/76e30859/attachment.htm>
More information about the users
mailing list