<html>
<head>
<style><!--
.hmmessage P
{
margin:0px;
padding:0px
}
body.hmmessage
{
font-size: 10pt;
font-family:Tahoma
}
--></style></head>
<body class='hmmessage'><div dir='ltr'>
Hello,<br><br> I am trying to run IDP on a remote unix host. I am seeing a ssl error from another desktop when I access through firefox, I accept the certificate and store it but still I see this...At this point on the remote unix machine I simply have Apache tomcat and shibboleth IDP installed. I want to access the URL https://dnsa-e2-saml.cde.abcd.com:8443/idp/status.<br><br>An error occurred during a connection to dnsa-e2-saml.cde.abcd.com:8443.<br><br>SSL peer cannot verify your certificate.<br><br>(Error code: ssl_error_bad_cert_alert)<br><br>The page you are trying to view cannot be shown because the authenticity of the received data could not be verified.<br> Please contact the website owners to inform them of this problem. Alternatively, use the command found in the help menu to report this broken site.<br><br>====================SET UP ON REMOTE UNIX SERVER============================<br><br>hostname : dnsa-e2-saml.cde.abcd.com<br><br>cat /etc/hosts<br>10.175.137.0 dnsa-e2-saml.cde.abcd.com<br><br><br>Installed Tomcat Apache 6.<br><br>server.xml content --><br><br><Connector port="8080" protocol="HTTP/1.1" <br> connectionTimeout="20000" <br> redirectPort="8443" /><br><br><br> <Connector port="8443"<br> protocol="org.apache.coyote.http11.Http11Protocol"<br> SSLImplementation="edu.internet2.middleware.security.tomcat6.DelegateToApplicationJSSEImplementation"<br> scheme="https"<br> SSLEnabled="true"<br> clientAuth="true" --> Changed this to "want" the error was "HTTP requires authentication"<br> keystoreFile="/home/shibidp/shibboleth/idp/credentials/idp.jks"<br> keystorePass="myself" /><br><br><br>Installed IDP as stated below gave the correct hostname like above<br><br>[shibidp@dnsa-e2-saml shibboleth-identityprovider-2.3.8]$ ./install.sh<br>Buildfile: src/installer/resources/build.xml<br><br>install:<br>!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!<br>Be sure you have read the installation/upgrade instructions on the Shibboleth website before proceeding.<br>!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!<br>Where should the Shibboleth Identity Provider software be installed? [/home/shibidp/shibboleth/idp]<br>/home/shibidp/shibboleth/idp<br>The directory '/home/shibidp/shibboleth/idp' already exists. Would you like to overwrite this Shibboleth configuration? (yes, [no])<br>yes<br>What is the fully qualified hostname of the Shibboleth Identity Provider server? [idp.example.com]<br>dnsa-e2-saml.cde.abcd.com<br>A keystore is about to be generated for you. Please enter a password that will be used to protect it.<br>myself<br>Updating property file: /home/shibidp/shibboleth-identityprovider-2.3.8/src/installer/resources/install.properties<br>Created dir: /home/shibidp/shibboleth/idp/bin<br>Created dir: /home/shibidp/shibboleth/idp/conf<br>Created dir: /home/shibidp/shibboleth/idp/credentials<br>Created dir: /home/shibidp/shibboleth/idp/lib<br>Created dir: /home/shibidp/shibboleth/idp/lib/endorsed<br>Created dir: /home/shibidp/shibboleth/idp/logs<br>Created dir: /home/shibidp/shibboleth/idp/metadata<br>Created dir: /home/shibidp/shibboleth/idp/war<br>Generating signing and encryption key, certificate, and keystore. <br>Copying 5 files to /home/shibidp/shibboleth/idp/bin<br>Copying 8 files to /home/shibidp/shibboleth/idp/conf<br>Copying 1 file to /home/shibidp/shibboleth/idp/metadata<br>Copying 51 files to /home/shibidp/shibboleth/idp/lib<br>Copying 5 files to /home/shibidp/shibboleth/idp/lib/endorsed<br>Copying 1 file to /home/shibidp/shibboleth-identityprovider-2.3.8/src/installer<br>Building war: /home/shibidp/shibboleth-identityprovider-2.3.8/src/installer/idp.war<br>Copying 1 file to /home/shibidp/shibboleth/idp/war<br>Deleting: /home/shibidp/shibboleth-identityprovider-2.3.8/src/installer/web.xml<br>Deleting: /home/shibidp/shibboleth-identityprovider-2.3.8/src/installer/idp.war<br><br>BUILD SUCCESSFUL<br>Total time: 38 seconds<br><br> </div></body>
</html>