<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv=Content-Type content="text/html; charset=iso-8859-1">
<meta name=Generator content="Microsoft Word 11 (filtered medium)">
<!--[if !mso]>
<style>
v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style>
<![endif]-->
<style>
<!--
/* Font Definitions */
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman";}
a:link, span.MsoHyperlink
{color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{color:#606420;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal;
font-family:Arial;
color:windowtext;}
span.EmailStyle18
{mso-style-type:personal-reply;
font-family:Arial;
color:navy;}
@page Section1
{size:612.0pt 792.0pt;
margin:72.0pt 90.0pt 72.0pt 90.0pt;}
div.Section1
{page:Section1;}
-->
</style>
<!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1030" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang=EN-CA link=blue vlink="#606420">
<div class=Section1>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'>In fact, I just compiled, and installed
last release of libcurl (7.21) with openssl and I still have the same error log
when I am trying to get attributes.<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'>As I verified the certificates (SP and
IDP), what else should I check?<o:p></o:p></span></font></p>
<div>
<p class=MsoNormal><b><font size=3 color=navy face="Times New Roman"><span
style='font-size:12.0pt;color:navy;font-weight:bold'><o:p> </o:p></span></font></b></p>
<p class=MsoNormal><!--[if gte vml 1]><v:group id="_x0000_s1028" editas="canvas"
style='position:absolute;margin-left:9pt;margin-top:14.25pt;width:51pt;
height:25.5pt;z-index:2' coordorigin="330,795" coordsize="1020,510">
<o:lock v:ext="edit" aspectratio="t" />
<v:shapetype id="_x0000_t75" coordsize="21600,21600" o:spt="75"
o:preferrelative="t" path="m@4@5l@4@11@9@11@9@5xe" filled="f" stroked="f">
<v:stroke joinstyle="miter" />
<v:formulas>
<v:f eqn="if lineDrawn pixelLineWidth 0" />
<v:f eqn="sum @0 1 0" />
<v:f eqn="sum 0 0 @1" />
<v:f eqn="prod @2 1 2" />
<v:f eqn="prod @3 21600 pixelWidth" />
<v:f eqn="prod @3 21600 pixelHeight" />
<v:f eqn="sum @0 0 1" />
<v:f eqn="prod @6 1 2" />
<v:f eqn="prod @7 21600 pixelWidth" />
<v:f eqn="sum @8 21600 0" />
<v:f eqn="prod @7 21600 pixelHeight" />
<v:f eqn="sum @10 21600 0" />
</v:formulas>
<v:path o:extrusionok="f" gradientshapeok="t" o:connecttype="rect" />
<o:lock v:ext="edit" aspectratio="t" />
</v:shapetype><v:shape id="_x0000_s1029" type="#_x0000_t75" style='position:absolute;
left:330;top:795;width:1020;height:510' o:preferrelative="f">
<v:fill o:detectmouseclick="t" />
<v:path o:extrusionok="t" o:connecttype="none" />
</v:shape></v:group><![endif]--><![if !vml]><span style='mso-ignore:vglayout;
position:absolute;z-index:2;margin-left:12px;margin-top:19px;width:68px;
height:34px'><img width=68 height=34 src="cid:image001.gif@01CC51D0.7E94A520"
v:shapes="_x0000_s1028 _x0000_s1029"></span><![endif]><b><font color=navy><span
lang=FR-CA style='color:navy;font-weight:bold'>------------------------------------------------------------------------------<o:p></o:p></span></font></b></p>
<p class=MsoNormal><b><font size=3 color=navy face="Times New Roman"><span
lang=FR-CA style='font-size:12.0pt;color:navy;font-weight:bold'>Pascal FAUCHARD<o:p></o:p></span></font></b></p>
<p class=MsoNormal><font size=2 color=navy face=Arial><span lang=FR-CA
style='font-size:10.0pt;font-family:Arial;color:navy'>Conseiller <o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 color=navy face=Arial><span lang=FR-CA
style='font-size:10.0pt;font-family:Arial;color:navy'>CGI:
514-415-3000 ext: 6952</span></font><font color=navy><span lang=FR-CA
style='color:navy'><o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 color=navy face=Arial><span lang=FR-CA
style='font-size:10.0pt;font-family:Arial;color:navy'>BAnQ: 514-873-1100
ext: 3300<o:p></o:p></span></font></p>
<p class=MsoNormal><b><font size=3 color=navy face="Times New Roman"><span
lang=FR-CA style='font-size:12.0pt;color:navy;font-weight:bold'>------------------------------------------------------------------------------<o:p></o:p></span></font></b></p>
<p class=MsoNormal><font size=2 color=navy face=Arial><span lang=FR-CA
style='font-size:10.0pt;font-family:Arial;color:navy'><o:p> </o:p></span></font></p>
<p class=MsoNormal><u><font size=1 color=navy face="Times New Roman"><span
lang=FR style='font-size:6.5pt;color:navy'>AVIS DE CONFIDENTIALITÉ</span></font></u><font
size=1 color=navy><span lang=FR style='font-size:6.5pt;color:navy'>: ce message
peut contenir des renseignements confidentiels appartenant exclusivement au
Groupe CGI Inc. ou à ses filiales. Si vous n'êtes pas le destinataire indiqué
ou prévu dans ce message (ou responsable de livrer ce message à la personne
indiquée ou prévue) ou si vous pensez que ce message vous a été adressé par
erreur, vous ne pouvez pas utiliser ou reproduire ce message, ni le livrer à
quelqu'un d'autre. Dans ce cas, vous devez le détruire et vous êtes prié
d'avertir l'expéditeur en répondant au courriel.<o:p></o:p></span></font></p>
<p class=MsoNormal><u><font size=1 color=navy face="Times New Roman"><span
style='font-size:6.5pt;color:navy'>CONFIDENTIALITY NOTICE</span></font></u><font
size=1 color=navy><span style='font-size:6.5pt;color:navy'>:
Proprietary/Confidential Information belonging to CGI Group Inc. and its
affiliates may be contained in this message. If you are not a recipient
indicated or intended in this message (or responsible for delivery of this
message to such person), or you think for any reason that this message may have
been addressed to you in error, you may not use or copy or deliver this message
to anyone else. In such case, you should destroy this message and are asked to
notify the sender by reply email.<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'><o:p> </o:p></span></font></p>
</div>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'><o:p> </o:p></span></font></p>
<div>
<div class=MsoNormal align=center style='text-align:center'><font size=3
face="Times New Roman"><span lang=EN-US style='font-size:12.0pt'>
<hr size=2 width="100%" align=center tabindex=-1>
</span></font></div>
<p class=MsoNormal><b><font size=2 face=Tahoma><span lang=EN-US
style='font-size:10.0pt;font-family:Tahoma;font-weight:bold'>From:</span></font></b><font
size=2 face=Tahoma><span lang=EN-US style='font-size:10.0pt;font-family:Tahoma'>
users-bounces@shibboleth.net [mailto:users-bounces@shibboleth.net] <b><span
style='font-weight:bold'>On Behalf Of </span></b>Fauchard, Pascal<br>
<b><span style='font-weight:bold'>Sent:</span></b> August 3, 2011 11:06 AM<br>
<b><span style='font-weight:bold'>To:</span></b> General support list for
questions related to Shibboleth<br>
<b><span style='font-weight:bold'>Subject:</span></b> libcurl issue</span></font><span
lang=EN-US><o:p></o:p></span></p>
</div>
<p class=MsoNormal><font size=3 face="Times New Roman"><span style='font-size:
12.0pt'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>Hi,<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>According to shibd.log, I have an issue with my
certificate :<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>2011-08-03 10:31:06 ERROR XMLTooling.SOAPTransport.CURL [5]:
supplied TrustEngine failed to validate SSL/TLS server certificate<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>2011-08-03 10:31:06 ERROR Shibboleth.AttributeResolver.Query
[5]: exception during SAML query to https://intranet.banq.qc.ca/idp/profile/SAML2/SOAP/AttributeQuery:
CURLSOAPTransport failed while contacting SOAP endpoint
(https://intranet.banq.qc.ca/idp/profile/SAML2/SOAP/AttributeQuery): SSL
certificate problem, verify that the CA cert is OK. Details:<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate
verify failed<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>I verified and even I re-created new SP certificates.<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>The problem is still happening.<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>I have centos 5, and according to shibboleth’s
documentation, there is an issue with the libcurl that come with RH6 : <a
href="https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPLinuxRH6">https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPLinuxRH6</a><o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>I am wondering where I can find the libcurl-openssl if it
could fix my problem.<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>Thanks.<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'><o:p> </o:p></span></font></p>
<p class=MsoNormal><b><font size=3 face="Times New Roman"><span
style='font-size:12.0pt;font-weight:bold'><o:p> </o:p></span></font></b></p>
<p class=MsoNormal><!--[if gte vml 1]><v:group id="_x0000_s1026" editas="canvas"
style='position:absolute;margin-left:9pt;margin-top:14.25pt;width:51pt;
height:25.5pt;z-index:1' coordorigin="330,795" coordsize="1020,510">
<o:lock v:ext="edit" aspectratio="t" />
<v:shape id="_x0000_s1027" type="#_x0000_t75" style='position:absolute;left:330;
top:795;width:1020;height:510' o:preferrelative="f">
<v:fill o:detectmouseclick="t" />
<v:path o:extrusionok="t" o:connecttype="none" />
</v:shape></v:group><![endif]--><![if !vml]><span style='mso-ignore:vglayout;
position:absolute;z-index:1;margin-left:12px;margin-top:19px;width:68px;
height:34px'><img width=68 height=34 src="cid:image001.gif@01CC51D0.7E94A520"
v:shapes="_x0000_s1026 _x0000_s1027"></span><![endif]><b><span lang=FR-CA
style='font-weight:bold'>------------------------------------------------------------------------------<o:p></o:p></span></b></p>
<p class=MsoNormal><font size=3 face="Times New Roman"><span lang=FR-CA
style='font-size:12.0pt'>Pascal</span><o:p></o:p></font></p>
</div>
</body>
</html>