<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<style type="text/css" style="display:none"><!-- p { margin-top: 0px; margin-bottom: 0px; }--></style>
</head>
<body dir="ltr" style="font-size:12pt;color:#000000;background-color:#FFFFFF;font-family:Calibri,Arial,Helvetica,sans-serif;">
<p>The metadata posted has a single cert marked as a signing cert, so you do not have an encryption cert, so the error message looks correct. Either update your metadata to include an encryption cert or do something else so that testshib does not try to encrypt
assertions sent to you (assuming it has that level of flexibility). <br>
</p>
<p><br>
</p>
<p><br>
</p>
<div style="color: rgb(33, 33, 33);">
<hr tabindex="-1" style="display:inline-block; width:98%">
<div id="divRplyFwdMsg" dir="ltr"><font face="Calibri, sans-serif" color="#000000" style="font-size:11pt"><b>From:</b> users <users-bounces@shibboleth.net> on behalf of Alessandro Molina <alessandro.molina@axant.it><br>
<b>Sent:</b> Monday, October 5, 2015 12:44 PM<br>
<b>To:</b> users@shibboleth.net<br>
<b>Subject:</b> Re: Issue with a ServiceProvider authenticating against testshib.org IdP</font>
<div> </div>
</div>
<div>
<div class="moz-cite-prefix">Not Found<br>
The requested URL /entities was not found on this server.<br>
<br>
:P<br>
<br>
Tried to set a very strange entityID on my side: <a class="moz-txt-link-freetext" href="https://localhost/asdf2gbhjkl/sprovide.xml">
https://localhost/asdf2gbhjkl/sprovide.xml</a><br>
But I still get the same error, so it's probably not an entityID collision :(<br>
<br>
Il 05/10/15 18:37, Kevin Foote ha scritto:<br>
</div>
<blockquote type="cite">
<div>Most likely your entiyID is not unique.</div>
<div id="AppleMailSignature">Check the <a href="http://testshib.org/entities">testshib.org/entities</a> page to make sure<br>
<br>
- sent from mobile</div>
<div><br>
On Oct 5, 2015, at 12:33 PM, Alessandro Molina <<a href="mailto:alessandro.molina@axant.it"></a><a class="moz-txt-link-abbreviated" href="mailto:alessandro.molina@axant.it">alessandro.molina@axant.it</a>> wrote:<br>
<br>
</div>
<blockquote type="cite">
<div>I'm currently trying to check a ServiceProvider configuration against <a href="http://testshib.org">
testshib.org</a> (using <a href="http://testshib.org">testshib.org</a> as an IdP),<br>
but <a href="http://testshib.org">testshib.org</a> si currently failing with the following traceback:<br>
<br>
12:07:04.650 - ERROR [edu.internet2.middleware.shibboleth.idp.profile.saml2.AbstractSAML2ProfileHandler:927] - Could not resolve a key encryption credential for peer entity:
<a class="moz-txt-link-freetext" href="https://localhost/sprovide.xml">https://localhost/sprovide.xml</a><br>
12:07:04.651 - ERROR [edu.internet2.middleware.shibboleth.idp.profile.saml2.AbstractSAML2ProfileHandler:289] - Unable to construct encrypter<br>
org.opensaml.xml.security.SecurityException: Could not resolve key encryption credential<br>
at edu.internet2.middleware.shibboleth.idp.profile.saml2.AbstractSAML2ProfileHandler.getEncrypter(AbstractSAML2ProfileHandler.java:928) ~[shibboleth-identityprovider-2.4.0.jar:na]<br>
at edu.internet2.middleware.shibboleth.idp.profile.saml2.AbstractSAML2ProfileHandler.buildResponse(AbstractSAML2ProfileHandler.java:286) ~[shibboleth-identityprovider-2.4.0.jar:na]<br>
<br>
I'm able to get to the login page and login with the myself-myself user, but then that traceback is produced when trying to send back the answer to my application.<br>
Here is the service provider .xml file uploaded to <a class="moz-txt-link-freetext" href="http://www.testshib.org/register.html">
</a><a class="moz-txt-link-freetext" href="http://www.testshib.org/register.html">http://www.testshib.org/register.html</a><br>
<br>
<?xml version='1.0' encoding='UTF-8'?><br>
<ns0:EntityDescriptor xmlns:ns0="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:xs=<a class="moz-txt-link-rfc2396E" href="http://www.w3.org/2001/XMLSchema"></a><a class="moz-txt-link-rfc2396E" href="http://www.w3.org/2001/XMLSchema">"http://www.w3.org/2001/XMLSchema"</a><br>
xmlns:ns1="urn:oasis:names:tc:SAML:metadata:attribute"<br>
xmlns:ns2="urn:oasis:names:tc:SAML:2.0:assertion" xmlns:ns4=<a class="moz-txt-link-rfc2396E" href="http://www.w3.org/2000/09/xmldsig#"></a><a class="moz-txt-link-rfc2396E" href="http://www.w3.org/2000/09/xmldsig#">"http://www.w3.org/2000/09/xmldsig#"</a><br>
xmlns:xsi=<a class="moz-txt-link-rfc2396E" href="http://www.w3.org/2001/XMLSchema-instance">"http://www.w3.org/2001/XMLSchema-instance"</a> entityID=<a class="moz-txt-link-rfc2396E" href="https://localhost/sprovide.xml">"https://localhost/sprovide.xml"</a>><br>
<ns0:Extensions><br>
<ns1:EntityAttributes><br>
<ns2:Attribute Name=<a class="moz-txt-link-rfc2396E" href="http://macedir.org/entity-category">"http://macedir.org/entity-category"</a><br>
NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"><br>
<ns2:AttributeValue xsi:type="xs:string"><a class="moz-txt-link-freetext" href="http://www.geant.net/uri/dataprotection-code-of-conduct/v1">http://www.geant.net/uri/dataprotection-code-of-conduct/v1</a><br>
</ns2:AttributeValue><br>
</ns2:Attribute><br>
</ns1:EntityAttributes><br>
</ns0:Extensions><br>
<ns0:SPSSODescriptor AuthnRequestsSigned="false" WantAssertionsSigned="true"<br>
protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol"><br>
<ns0:KeyDescriptor use="signing"><br>
<ns4:KeyInfo><br>
<ns4:X509Data><br>
<ns4:X509Certificate>MIIC7zCCAdegAwIBAgIJAKNUFVpcL0KLMA0GCSqGSIb3DQEBBQUAMBIxEDAOBgNV<br>
BAMTB0xQdWxzYXIwHhcNMTUxMDA1MTYwNTAyWhcNMjUxMDAyMTYwNTAyWjASMRAw<br>
DgYDVQQDEwdMUHVsc2FyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA<br>
04Dvyk0OAmkcjFIzptAJyluGcfP8WsmdE01XOvIV0bi40Cc1c3SCfdXM+AU7kiz6<br>
Ew37m9kXz1FbIw9n9Zsv3ImJ7lqQ1/ZKUkzB/Aj49p85XsoqMwtRq8Zwun9sLAME<br>
+sjWh4+OyQH2Dr/Na7WnafuuYeIl72rFAoUg2IDEodZ5b204suKp1qi0GQwYm2Jp<br>
Ahh0f46RhXawcYVmTMPUS6XQjJ+WH95sDxxxV6Yjfw7d3uZNQ+cNAec7hFxSSAka<br>
nShkimm6KfC5x04jgjz1YA4iNXPoj2Pi2E0l3EBl16qBmhjXoppagriHfN+xIxcD<br>
hEggCSaYLui2Qm/8maeqQwIDAQABo0gwRjAlBgNVHREEHjAcggdMUHVsc2FyhhFo<br>
dHRwczovL2xvY2FsaG9zdDAdBgNVHQ4EFgQUQbbmEqIJlFT8GRdSPE56N+dGZi8w<br>
DQYJKoZIhvcNAQEFBQADggEBAC8jKuZWkHx/AhM1GL2vHq/h9SxHoHFcyYDipVyC<br>
Ql5VB5PjTaLdQ9RZCtJhlJa75DeVfW6hncDY5Q2phb7MwH2GfWm/bZwmPyfwsEeI<br>
uzOcfyWU24582ITtWBNGkaxkE3uI5cDRvmKfO6fTrAdvw+emtVzYOUcAxzqz0PAQ<br>
B5f2jLbg2sTLB6d4KawGPoq3JtVXPgagIANZ5IsR/dem3FIsZFj8nsztibFFTH/O<br>
ljUAfZledVW5KIfApmHMc4qLvAuSSOSmax6ksBjPE4LVZx/9iftHQOMsucW1O4Ob<br>
ykh4ttyYdRoNP1es5xuzTF3Qw2XRMK1N4ZgFsOQudlEexik=<br>
</ns4:X509Certificate><br>
</ns4:X509Data><br>
</ns4:KeyInfo><br>
</ns0:KeyDescriptor><br>
<ns0:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect"<br>
Location=<a class="moz-txt-link-rfc2396E" href="https://localhost/slo/redirect"></a><a class="moz-txt-link-rfc2396E" href="https://localhost/slo/redirect">"https://localhost/slo/redirect"</a>/><br>
<ns0:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST"<br>
Location=<a class="moz-txt-link-rfc2396E" href="https://localhost/slo/post"></a><a class="moz-txt-link-rfc2396E" href="https://localhost/slo/post">"https://localhost/slo/post"</a>/><br>
<ns0:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST"<br>
Location=<a class="moz-txt-link-rfc2396E" href="https://localhost/acs/post"></a><a class="moz-txt-link-rfc2396E" href="https://localhost/acs/post">"https://localhost/acs/post"</a> index="1"/><br>
</ns0:SPSSODescriptor><br>
</ns0:EntityDescriptor><br>
<br>
We are currently using PySAML2 which has also generated the previous XML.<br>
It something wrong that I'm missing? The whole <a href="http://testshib.org">testshib.org</a> traceback is attached to the email<br>
<br>
<br>
<pre class="moz-signature" cols="72">--
Alessandro Molina
Chief Technical Officer & Director of Operations
Axant s.n.c. - <a class="moz-txt-link-freetext" href="http://www.axant.it">http://www.axant.it</a>
Phone: +39 346 739 9923
Fax: +39 011 412 1756</pre>
</div>
</blockquote>
<blockquote type="cite">
<div><traceback.txt></div>
</blockquote>
<blockquote type="cite">
<div><span>-- </span><br>
<span>To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net">
</a><a class="moz-txt-link-abbreviated" href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.net</a></span></div>
</blockquote>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset> <br>
</blockquote>
<br>
<br>
<pre class="moz-signature" cols="72">--
Alessandro Molina
Chief Technical Officer & Director of Operations
Axant s.n.c. - <a class="moz-txt-link-freetext" href="http://www.axant.it">http://www.axant.it</a>
Phone: +39 346 739 9923
Fax: +39 011 412 1756</pre>
</div>
</div>
</body>
</html>