<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:st1="urn:schemas-microsoft-com:office:smarttags" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv=Content-Type content="text/html; charset=us-ascii">
<meta name=Generator content="Microsoft Word 11 (filtered medium)">
<base href="x-msg://1163/">
<!--[if !mso]>
<style>
v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style>
<![endif]--><o:SmartTagType
namespaceuri="urn:schemas-microsoft-com:office:smarttags" name="PersonName"/>
<!--[if !mso]>
<style>
st1\:*{behavior:url(#default#ieooui) }
</style>
<![endif]-->
<style>
<!--
/* Font Definitions */
@font-face
{font-family:Helvetica;
panose-1:2 11 6 4 2 2 2 2 2 4;}
@font-face
{font-family:"FuturaA Bk BT";
panose-1:2 11 5 2 2 2 4 2 3 3;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman";}
a:link, span.MsoHyperlink
{color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{color:blue;
text-decoration:underline;}
span.EstiloCorreo20
{mso-style-type:personal-reply;
font-family:Arial;
color:navy;}
@page Section1
{size:595.3pt 841.9pt;
margin:72.0pt 90.0pt 72.0pt 90.0pt;}
div.Section1
{page:Section1;}
-->
</style>
<!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang=ES-TRAD link=blue vlink=blue style='word-wrap: break-word;
-webkit-nbsp-mode: space;-webkit-line-break: after-white-space'>
<div class=Section1>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'>Hi Ian,<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 color=navy face=Arial><span lang=EN-GB
style='font-size:10.0pt;font-family:Arial;color:navy'>the problem is not
related to the socket connection closed situation, because it happens in both
cases.<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 color=navy face=Arial><span lang=EN-GB
style='font-size:10.0pt;font-family:Arial;color:navy'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 color=navy face=Arial><span lang=EN-GB
style='font-size:10.0pt;font-family:Arial;color:navy'>regards<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 color=navy face=Arial><span lang=EN-GB
style='font-size:10.0pt;font-family:Arial;color:navy'><o:p> </o:p></span></font></p>
<div>
<div class=MsoNormal align=center style='text-align:center'><font size=3
face="Times New Roman"><span lang=ES style='font-size:12.0pt'>
<hr size=3 width="100%" align=center tabindex=-1>
</span></font></div>
<p class=MsoNormal><b><font size=2 face=Tahoma><span lang=ES style='font-size:
10.0pt;font-family:Tahoma;font-weight:bold'>De:</span></font></b><font size=2
face=Tahoma><span lang=ES style='font-size:10.0pt;font-family:Tahoma'> users-bounces@shibboleth.net
[mailto:users-bounces@shibboleth.net] <b><span style='font-weight:bold'>En
nombre de </span></b>Ian Young<br>
<b><span style='font-weight:bold'>Enviado el:</span></b> martes, 26 de junio de
2012 17:01<br>
<b><span style='font-weight:bold'>Para:</span></b> <st1:PersonName w:st="on">Shib
Users</st1:PersonName><br>
<b><span style='font-weight:bold'>Asunto:</span></b> Re: SP randomly failed to
validate certificate IDP certicate.</span></font><span lang=ES><o:p></o:p></span></p>
</div>
<p class=MsoNormal><font size=3 face="Times New Roman"><span style='font-size:
12.0pt'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=3 face="Times New Roman"><span style='font-size:
12.0pt'><o:p> </o:p></span></font></p>
<div>
<div>
<p class=MsoNormal><font size=3 face="Times New Roman"><span style='font-size:
12.0pt'>On 26 Jun 2012, at 15:35, <st1:PersonName w:st="on">DE VEGA BARREIRO,
Manuel</st1:PersonName> (Manuel) wrote:<o:p></o:p></span></font></p>
</div>
<div>
<p class=MsoNormal><font size=3 face="Times New Roman"><span style='font-size:
12.0pt'><o:p> </o:p></span></font></p>
</div>
<div>
<p class=MsoNormal><font size=3 face="Times New Roman"><span style='font-size:
12.0pt'>I can't help but notice a difference between the two samples:<o:p></o:p></span></font></p>
</div>
<p class=MsoNormal><font size=3 face="Times New Roman"><span style='font-size:
12.0pt'><br>
<br>
<o:p></o:p></span></font></p>
<p class=MsoNormal><span class=apple-style-span><font size=3 face=Arial><span
style='font-size:12.0pt;font-family:Arial'>Authentication and profile exchange
between IDP and SP works fine, but time to time SP client refuse to accept IDP
certificate:</span></font></span><span class=apple-style-span><font size=4
face=Helvetica><span style='font-size:13.5pt;font-family:Helvetica'><o:p></o:p></span></font></span></p>
<span style='orphans: 2;text-align:-webkit-auto;widows: 2;-webkit-border-horizontal-spacing: 0px;
-webkit-border-vertical-spacing: 0px;-webkit-text-decorations-in-effect: none;
-webkit-text-size-adjust: auto;-webkit-text-stroke-width: 0px;word-spacing:
0px'>
<div>
<div>
<p class=MsoNormal><font size=2 face="FuturaA Bk BT"><span style='font-size:
10.0pt;font-family:"FuturaA Bk BT"'> </span></font><font size=2
face=Arial><span style='font-size:10.0pt;font-family:Arial'><o:p></o:p></span></font></p>
</div>
<div>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>2012-06-26 12:29:49 DEBUG XMLTooling.SOAPTransport.CURL
[91]: sending SOAP message to<span class=apple-converted-space> </span><a
href="https://10.122.4.76:7122/coi-idp/AA">https://10.122.4.76:7122/coi-idp/AA</a><o:p></o:p></span></font></p>
</div>
<div>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>2012-06-26 12:29:49 DEBUG XMLTooling.libcurl [91]: About to
connect() to 10.122.4.76 port 7122<o:p></o:p></span></font></p>
</div>
<div>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>2012-06-26 12:29:49 DEBUG XMLTooling.libcurl
[91]: Trying 10.122.4.76...<o:p></o:p></span></font></p>
</div>
<div>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>2012-06-26 12:29:49 DEBUG XMLTooling.libcurl [91]: connected<o:p></o:p></span></font></p>
</div>
</div>
</span>
<div>
<p class=MsoNormal><font size=3 face="Times New Roman"><span style='font-size:
12.0pt'><o:p> </o:p></span></font></p>
</div>
<div>
<p class=MsoNormal><font size=3 face="Times New Roman"><span style='font-size:
12.0pt'>[…]<o:p></o:p></span></font></p>
</div>
<div>
<p class=MsoNormal><font size=3 face="Times New Roman"><span style='font-size:
12.0pt'><o:p> </o:p></span></font></p>
</div>
<blockquote style='margin-top:5.0pt;margin-bottom:5.0pt' type=cite><span
style='orphans: 2;text-align:-webkit-auto;widows: 2;-webkit-border-horizontal-spacing: 0px;
-webkit-border-vertical-spacing: 0px;-webkit-text-decorations-in-effect: none;
-webkit-text-size-adjust: auto;-webkit-text-stroke-width: 0px;word-spacing:
0px'>
<div>
<div>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>I’m sure that certificate are ok, because most of the
time SP accept it without any complains:<o:p></o:p></span></font></p>
</div>
<div>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'> <o:p></o:p></span></font></p>
</div>
<div>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>2012-06-26 12:13:28 DEBUG XMLTooling.SOAPTransport.CURL
[86]: sending SOAP message to<span class=apple-converted-space> </span><a
href="https://10.122.4.76:7122/coi-idp/AA">https://10.122.4.76:7122/coi-idp/AA</a><o:p></o:p></span></font></p>
</div>
<div>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>2012-06-26 12:13:28 DEBUG XMLTooling.libcurl [86]:
Connection 0 seems to be dead!<o:p></o:p></span></font></p>
</div>
<div>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>2012-06-26 12:13:28 DEBUG XMLTooling.libcurl [86]: Closing
connection #0<o:p></o:p></span></font></p>
</div>
<div>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>2012-06-26 12:13:28 DEBUG XMLTooling.libcurl [86]: About to
connect() to 10.122.4.76 port 7122<o:p></o:p></span></font></p>
</div>
<div>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>2012-06-26 12:13:28 DEBUG XMLTooling.libcurl
[86]: Trying 10.122.4.76...<o:p></o:p></span></font></p>
</div>
<div>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>2012-06-26 12:13:28 DEBUG XMLTooling.libcurl [86]: connected<o:p></o:p></span></font></p>
</div>
</div>
</blockquote>
</span>
<div>
<p class=MsoNormal><font size=3 face="Times New Roman"><span style='font-size:
12.0pt'><o:p> </o:p></span></font></p>
</div>
<div>
<p class=MsoNormal><font size=3 face="Times New Roman"><span style='font-size:
12.0pt'>So in these two particular cases, the SP was in a different state with
respect to having previously communicated with the IdP. It's conceivable
this is related to your problem. I'd suggest that if you have lots more
logs you try looking through them for all occurrences, and see if this
difference is consistent between the "good" and "bad"
cases.<o:p></o:p></span></font></p>
</div>
<div>
<p class=MsoNormal><font size=3 face="Times New Roman"><span style='font-size:
12.0pt'><o:p> </o:p></span></font></p>
</div>
<div>
<p class=MsoNormal><font size=3 face="Times New Roman"><span style='font-size:
12.0pt'>I'm not saying it will tell us what the problem is, but it might be a
clue.<o:p></o:p></span></font></p>
</div>
<div>
<p class=MsoNormal><font size=3 face="Times New Roman"><span style='font-size:
12.0pt'><o:p> </o:p></span></font></p>
</div>
</div>
<span style='orphans: 2;text-align:auto;widows: 2;-webkit-border-horizontal-spacing: 0px;
-webkit-border-vertical-spacing: 0px;-webkit-text-decorations-in-effect: none;
-webkit-text-size-adjust: auto;-webkit-text-stroke-width: 0px;word-spacing:
0px'><span style='orphans: 2;widows: 2;-webkit-border-horizontal-spacing: 0px;
-webkit-border-vertical-spacing: 0px;-webkit-text-decorations-in-effect: none;
-webkit-text-size-adjust: auto;-webkit-text-stroke-width: 0px;word-spacing:
0px'>
<div apple-content-edited=true>
<div>
<p class=MsoNormal><span class=apple-tab-span><font size=1 color=black
face=Helvetica><span style='font-size:7.0pt;font-family:Helvetica;color:black'> </span></font></span><font
size=1 color=black face=Helvetica><span style='font-size:7.0pt;font-family:
Helvetica;color:black'>-- Ian<o:p></o:p></span></font></p>
</div>
<div>
<p class=MsoNormal><font size=1 color=black face=Helvetica><span
style='font-size:7.0pt;font-family:Helvetica;color:black'><o:p> </o:p></span></font></p>
</div>
<p class=MsoNormal><font size=3 face="Times New Roman"><span style='font-size:
12.0pt'></span><o:p> </o:p></span></font></p>
</div>
</span>
<p class=MsoNormal><font size=3 face="Times New Roman"><span style='font-size:
12.0pt'><o:p> </o:p></span></font></p>
</div>
</body>
</html>