<html><head></head><body><div style="font-family: Verdana;font-size: 12.0px;"><div>Problem resolved, thanks to everybody
<div>
<div name="quote" style="margin:10px 5px 5px 10px; padding: 10px 0 10px 10px; border-left:2px solid #C3D9E5; word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;">
<div style="margin:0 0 10px 0;"><b>Sent:</b> Wednesday, May 31, 2017 at 5:24 PM<br/>
<b>From:</b> "Kevin Foote" <kevin.foote@colorado.edu><br/>
<b>To:</b> "Shib Users" <users@shibboleth.net><br/>
<b>Subject:</b> Re: sp testshib certificate validation on attribute query</div>
<div name="quoted-content">Scott and Rod have already pinpointed your issue and indicated what you need to do<br/>
to correct it.<br/>
<br/>
Additionally, not related to your issue, I’ve deleted the multiple copies of metadata you uploaded to<br/>
the system. This was just house keeping.<br/>
<br/>
--------<br/>
thanks<br/>
kevin.foote<br/>
<br/>
> On May 31, 2017, at 08:56, aaaa aaaa <si_976@mail.com> wrote:<br/>
><br/>
> it's <a href="https://shibboleth-test.socialnation.it/idp/shibboleth" target="_blank">https://shibboleth-test.socialnation.it/idp/shibboleth</a><br/>
><br/>
> Sent: Wednesday, May 31, 2017 at 4:30 PM<br/>
> From: "Kevin Foote" <kevin.foote@colorado.edu><br/>
> To: "Shib Users" <users@shibboleth.net><br/>
> Subject: Re: sp testshib certificate validation on attribute query<br/>
> Again ..<br/>
> What is your entityID?<br/>
><br/>
> --------<br/>
> thanks<br/>
> kevin.foote<br/>
><br/>
> > On May 31, 2017, at 08:22, aaaa aaaa <si_976@mail.com> wrote:<br/>
> ><br/>
> > > 2017-05-31 09:15:54 DEBUG XMLTooling.TrustEngine.ExplicitKey [1582]: no keys within this peer's key information matched the given end-entity certificate<br/>
> > > The metadata doesn't have the correct key information<br/>
> ><br/>
> > Can you give me some hint? In my metadata I have the reference to the certificates generated automatically by shibboleth IdP.<br/>
> > Instead in the error message I see it's complaining about the tomcat ssl certificate generated with letsencrypt.<br/>
> > --<br/>
> > To unsubscribe from this list send an email to users-unsubscribe@shibboleth.net<br/>
><br/>
> --<br/>
> To unsubscribe from this list send an email to users-unsubscribe@shibboleth.net<br/>
> --<br/>
> To unsubscribe from this list send an email to users-unsubscribe@shibboleth.net<br/>
<br/>
--<br/>
To unsubscribe from this list send an email to users-unsubscribe@shibboleth.net</div>
</div>
</div>
</div></div></body></html>