<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<style type="text/css" style="display:none;"><!-- P {margin-top:0;margin-bottom:0;} --></style>
</head>
<body dir="ltr">
<div id="divtagdefaultwrapper" style="font-size:12pt;color:#000000;font-family:Calibri,Helvetica,sans-serif;" dir="ltr">
<p style="margin-top:0;margin-bottom:0">Nope.  TestShib will have more apparent failures over the next few months, but they will be resolved much faster, with Kevin's blessings.  I do need to speak at length with him first, for he has done so much good.</p>
</div>
<hr style="display:inline-block;width:98%" tabindex="-1">
<div id="divRplyFwdMsg" dir="ltr"><font face="Calibri, sans-serif" style="font-size:11pt" color="#000000"><b>From:</b> users <users-bounces@shibboleth.net> on behalf of Dmitry Ukov <dukov@mirantis.com><br>
<b>Sent:</b> Monday, January 15, 2018 9:17:37 AM<br>
<b>To:</b> Shib Users<br>
<b>Subject:</b> Re: SP metadata upload fails</font>
<div> </div>
</div>
<div>
<div dir="ltr">Nate,
<div>thanks a lot! I was thinking if I did something wrong or had corrupted metadata</div>
</div>
<div class="x_gmail_extra"><br>
<div class="x_gmail_quote">On Mon, Jan 15, 2018 at 8:20 PM, Klingenstein, Nate <span dir="ltr">
<<a href="mailto:nklingenstein@calstate.edu" target="_blank">nklingenstein@calstate.edu</a>></span> wrote:<br>
<blockquote class="x_gmail_quote" style="margin:0 0 0 .8ex; border-left:1px #ccc solid; padding-left:1ex">
<div dir="ltr">
<div id="x_m_2171043697628380184divtagdefaultwrapper" dir="ltr" style="font-size:12pt; color:#000000; font-family:Calibri,Helvetica,sans-serif">
<p style="margin-top:0; margin-bottom:0">Dmitry,</p>
<p style="margin-top:0; margin-bottom:0"><br>
</p>
<p style="margin-top:0; margin-bottom:0">I apologize, but I'm unable to fix this right now.  TestShib is graciously hosted by Penn State, but SSH to machines there is a bit... challenging, I suspect in light of security measures they may have in place.</p>
<p style="margin-top:0; margin-bottom:0"><br>
</p>
<p style="margin-top:0; margin-bottom:0">Despite 15 minutes of trying, I can't get a key exchange going.  I'll try again in 4 hours.  Kevin might save the day sooner.</p>
<p style="margin-top:0; margin-bottom:0"><br>
</p>
<p style="margin-top:0; margin-bottom:0">Thanks,</p>
<p style="margin-top:0; margin-bottom:0">Nate.</p>
</div>
<span class="">
<hr style="display:inline-block; width:98%">
<div id="x_m_2171043697628380184divRplyFwdMsg" dir="ltr"><font face="Calibri, sans-serif" color="#000000" style="font-size:11pt"><b>From:</b> users <<a href="mailto:users-bounces@shibboleth.net" target="_blank">users-bounces@shibboleth.net</a>> on behalf of
 Dmitry Ukov <<a href="mailto:dukov@mirantis.com" target="_blank">dukov@mirantis.com</a>><br>
<b>Sent:</b> Monday, January 15, 2018 6:08:47 AM<br>
<b>To:</b> <a href="mailto:users@shibboleth.net" target="_blank">users@shibboleth.net</a><br>
<b>Subject:</b> SP metadata upload fails</font>
<div> </div>
</div>
</span>
<div>
<div class="x_h5">
<div>
<div dir="ltr"><span style="font-size:12.8px">Hello,</span>
<div style="font-size:12.8px">I'm trying to upload SP metadata to <a href="http://idp.testshib.org/" target="_blank">idp.testshib.org</a> via <a href="https://www.testshib.org/register.html" target="_blank">https:<wbr>//www.testshib.org/register.<wbr>html</a></div>
<div style="font-size:12.8px"><br>
</div>
<div style="font-size:12.8px">After clicking 'Upload file' button i'm getting response: 'Something horrible happened. Please contact the Shibboleth Users list.'</div>
<div style="font-size:12.8px"><br>
</div>
<div style="font-size:12.8px">Same metadata was working previously. Could you please help with troubleshooting</div>
<div style="font-size:12.8px">Metadata:</div>
<div style="font-size:12.8px"><br>
</div>
<div style="font-size:12.8px">
<div><!--</div>
<div>This is example metadata only. Do *NOT* supply it as is without review,</div>
<div>and do *NOT* provide it in real time to your partners.</div>
<div> --></div>
<div><md:EntityDescriptor xmlns:md="urn:oasis:names:tc:S<wbr>AML:2.0:metadata" ID="_71a7d284562b4ee3800714d22<wbr>0fa14e3057244dc" entityID="<a href="http://10.10.10.3:5000/Shibboleth.sso/Metadata" target="_blank">http://10.10.10.3:50<wbr>00/Shibboleth.sso/Metadata</a>"></div>
<div><br>
</div>
<div>  <md:Extensions xmlns:alg="urn:oasis:names:tc:<wbr>SAML:metadata:algsupport"></div>
<div>    <alg:DigestMethod Algorithm="<a href="http://www.w3.org/2001/04/xmlenc#sha512" target="_blank">http://www.w3.org/2<wbr>001/04/xmlenc#sha512</a>"/></div>
<div>    <alg:DigestMethod Algorithm="<a href="http://www.w3.org/2001/04/xmldsig-more#sha384" target="_blank">http://www.w3.org/2<wbr>001/04/xmldsig-more#sha384</a>"/></div>
<div>    <alg:DigestMethod Algorithm="<a href="http://www.w3.org/2001/04/xmlenc#sha256" target="_blank">http://www.w3.org/2<wbr>001/04/xmlenc#sha256</a>"/></div>
<div>    <alg:DigestMethod Algorithm="<a href="http://www.w3.org/2001/04/xmldsig-more#sha224" target="_blank">http://www.w3.org/2<wbr>001/04/xmldsig-more#sha224</a>"/></div>
<div>    <alg:DigestMethod Algorithm="<a href="http://www.w3.org/2000/09/xmldsig#sha1" target="_blank">http://www.w3.org/2<wbr>000/09/xmldsig#sha1</a>"/></div>
<div>    <alg:SigningMethod Algorithm="<a href="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha512" target="_blank">http://www.w3.org/2<wbr>001/04/xmldsig-more#ecdsa-sha5<wbr>12</a>"/></div>
<div>    <alg:SigningMethod Algorithm="<a href="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha384" target="_blank">http://www.w3.org/2<wbr>001/04/xmldsig-more#ecdsa-sha3<wbr>84</a>"/></div>
<div>    <alg:SigningMethod Algorithm="<a href="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha256" target="_blank">http://www.w3.org/2<wbr>001/04/xmldsig-more#ecdsa-sha2<wbr>56</a>"/></div>
<div>    <alg:SigningMethod Algorithm="<a href="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha224" target="_blank">http://www.w3.org/2<wbr>001/04/xmldsig-more#ecdsa-sha2<wbr>24</a>"/></div>
<div>    <alg:SigningMethod Algorithm="<a href="http://www.w3.org/2001/04/xmldsig-more#rsa-sha512" target="_blank">http://www.w3.org/2<wbr>001/04/xmldsig-more#rsa-sha512</a><wbr>"/></div>
<div>    <alg:SigningMethod Algorithm="<a href="http://www.w3.org/2001/04/xmldsig-more#rsa-sha384" target="_blank">http://www.w3.org/2<wbr>001/04/xmldsig-more#rsa-sha384</a><wbr>"/></div>
<div>    <alg:SigningMethod Algorithm="<a href="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256" target="_blank">http://www.w3.org/2<wbr>001/04/xmldsig-more#rsa-sha256</a><wbr>"/></div>
<div>    <alg:SigningMethod Algorithm="<a href="http://www.w3.org/2009/xmldsig11#dsa-sha256" target="_blank">http://www.w3.org/2<wbr>009/xmldsig11#dsa-sha256</a>"/></div>
<div>    <alg:SigningMethod Algorithm="<a href="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha1" target="_blank">http://www.w3.org/2<wbr>001/04/xmldsig-more#ecdsa-sha1</a><wbr>"/></div>
<div>    <alg:SigningMethod Algorithm="<a href="http://www.w3.org/2000/09/xmldsig#rsa-sha1" target="_blank">http://www.w3.org/2<wbr>000/09/xmldsig#rsa-sha1</a>"/></div>
<div>    <alg:SigningMethod Algorithm="<a href="http://www.w3.org/2000/09/xmldsig#dsa-sha1" target="_blank">http://www.w3.org/2<wbr>000/09/xmldsig#dsa-sha1</a>"/></div>
<div>  </md:Extensions></div>
<div><br>
</div>
<div>  <md:SPSSODescriptor protocolSupportEnumeration="ur<wbr>n:oasis:names:tc:SAML:2.0:prot<wbr>ocol urn:oasis:names:tc:SAML:1.1:pr<wbr>otocol urn:oasis:names:tc:SAML:1.0:pr<wbr>otocol"></div>
<div>    <md:Extensions></div>
<div>      <init:RequestInitiator xmlns:init="urn:oasis:names:tc<wbr>:SAML:profiles:SSO:request-ini<wbr>t" Binding="urn:oasis:names:tc:SA<wbr>ML:profiles:SSO:request-init" Location="<a href="http://10.10.10.3:5000/Shibboleth.sso/Login" target="_blank">http://10.10.10.3:50<wbr>00/Shibboleth.sso/Login</a>"/></div>
<div>    </md:Extensions></div>
<div>    <md:KeyDescriptor></div>
<div>      <ds:KeyInfo xmlns:ds="<a href="http://www.w3.org/2000/09/xmldsig#" target="_blank">http://www.w3.org/20<wbr>00/09/xmldsig#</a>"></div>
<div>        <ds:KeyName><a href="http://jse3.jaws.jio.com/" target="_blank">jse3.jaws.jio.com</a><<wbr>/ds:KeyName></div>
<div>        <ds:X509Data></div>
<div>          <ds:X509SubjectName>CN=<a href="http://jse3.jaws.jio.com/" target="_blank">jse3.ja<wbr>ws.jio.com</a></ds:X509SubjectName<wbr>></div>
<div>          <ds:X509Certificate>MIIC+jCCAe<wbr>KgAwIBAgIJAIzxs+Cu5An9MA0GCSqG<wbr>SIb3DQEBBQUAMBwxGjAYBgNV</div>
<div>BAMTEWpzZTMuamF3cy5qaW8uY29tMB<wbr>4XDTE3MTAzMDA3MDA0MVoXDTI3MTAy<wbr>ODA3</div>
<div>MDA0MVowHDEaMBgGA1UEAxMRanNlMy<wbr>5qYXdzLmppby5jb20wggEiMA0GCSqG<wbr>SIb3</div>
<div>DQEBAQUAA4IBDwAwggEKAoIBAQCzgN<wbr>LVVokbVbJ61rZROdTEHiDzMEWcYpDq<wbr>E+9T</div>
<div>niYYs3pB3PiQunp12dpzcDbxkcBq76<wbr>s06We9S7zaJOeUN2dbVp4KS8E57xQf<wbr>0z+k</div>
<div>9C6dNd6spV6mcyUHynRHHXeNY/PKQd<wbr>8nBe7wlIQBuCIhePSxHD7nos7vbfVI<wbr>dNkH</div>
<div>jHwL94a5DNlD9hYeuWZp+RRe8gZESq<wbr>ov95ZGO+dW+Okawc5mJHRsJFDl8m+<wbr>bwy6g</div>
<div>HzNO50dT7WUN4GV11JbnMcHzSpZ5Kz<wbr>6PXXF/GeQ8FAJBrOmmB/Vk5mSz4Rdt<wbr>5LBr</div>
<div>2vxCHdwNU658YOrfV968tagozDIAlY<wbr>besC6mQIjS3LqTRZClAgMBAAGjPzA9<wbr>MBwG</div>
<div>A1UdEQQVMBOCEWpzZTMuamF3cy5qaW<wbr>8uY29tMB0GA1UdDgQWBBRoIeOFyW++<wbr>rPjD</div>
<div>wJ6csr/3l1wHqzANBgkqhkiG9w0BAQ<wbr>UFAAOCAQEALVNeElIgr+<wbr>r9QoNRzES17DZC</div>
<div>04MxeWuorTC11WowEYXu7bP7RXyfPb<wbr>MP8gk8wIcLZp7O1MDTCv8x3Sbl/cWa<wbr>hk/F</div>
<div>EJV3maJnEMYWJtMqPVBb3OwpXw1Gz5<wbr>lLxVB9J+35V0t6HP/Xdtp3zB8ynKIo<wbr>byuX</div>
<div>kOy48JwV+TbLPoo2EPC3KIYCvV8XHe<wbr>tjo1Y1iJwyXT5dXsWqLlvC4kvnUuyI<wbr>ZJaq</div>
<div>mSGqfjrQNsuS83vnut4jzXer5jhrPS<wbr>rhN5TQPlV1bZehPMNrnzmyUoOprE3A<wbr>PXA6</div>
<div>ZvzpzAxS1Zw9rI/aKi629H6xjr01bp<wbr>h1QfPdiYlZOoWooQv4bTybxZOOgR4u<wbr>Cw==</div>
<div></ds:X509Certificate></div>
<div>        </ds:X509Data></div>
<div>      </ds:KeyInfo></div>
<div>      <md:EncryptionMethod Algorithm="<a href="http://www.w3.org/2009/xmlenc11#aes128-gcm" target="_blank">http://www.w3.org/2<wbr>009/xmlenc11#aes128-gcm</a>"/></div>
<div>      <md:EncryptionMethod Algorithm="<a href="http://www.w3.org/2009/xmlenc11#aes192-gcm" target="_blank">http://www.w3.org/2<wbr>009/xmlenc11#aes192-gcm</a>"/></div>
<div>      <md:EncryptionMethod Algorithm="<a href="http://www.w3.org/2009/xmlenc11#aes256-gcm" target="_blank">http://www.w3.org/2<wbr>009/xmlenc11#aes256-gcm</a>"/></div>
<div>      <md:EncryptionMethod Algorithm="<a href="http://www.w3.org/2001/04/xmlenc#aes128-cbc" target="_blank">http://www.w3.org/2<wbr>001/04/xmlenc#aes128-cbc</a>"/></div>
<div>      <md:EncryptionMethod Algorithm="<a href="http://www.w3.org/2001/04/xmlenc#aes192-cbc" target="_blank">http://www.w3.org/2<wbr>001/04/xmlenc#aes192-cbc</a>"/></div>
<div>      <md:EncryptionMethod Algorithm="<a href="http://www.w3.org/2001/04/xmlenc#aes256-cbc" target="_blank">http://www.w3.org/2<wbr>001/04/xmlenc#aes256-cbc</a>"/></div>
<div>      <md:EncryptionMethod Algorithm="<a href="http://www.w3.org/2001/04/xmlenc#tripledes-cbc" target="_blank">http://www.w3.org/2<wbr>001/04/xmlenc#tripledes-cbc</a>"/></div>
<div>      <md:EncryptionMethod Algorithm="<a href="http://www.w3.org/2009/xmlenc11#rsa-oaep" target="_blank">http://www.w3.org/2<wbr>009/xmlenc11#rsa-oaep</a>"/></div>
<div>      <md:EncryptionMethod Algorithm="<a href="http://www.w3.org/2001/04/xmlenc#rsa-oaep-mgf1p" target="_blank">http://www.w3.org/2<wbr>001/04/xmlenc#rsa-oaep-mgf1p</a>"/<wbr>></div>
<div>    </md:KeyDescriptor></div>
<div>    <md:ArtifactResolutionService Binding="urn:oasis:names:tc:SA<wbr>ML:2.0:bindings:SOAP" Location="<a href="http://10.10.10.3:5000/Shibboleth.sso/Artifact/SOAP" target="_blank">http://10.10.10.3:50<wbr>00/Shibboleth.sso/Artifact/SOA<wbr>P</a>" index="1"/></div>
<div>    <md:SingleLogoutService Binding="urn:oasis:names:tc:SA<wbr>ML:2.0:bindings:SOAP" Location="<a href="http://10.10.10.3:5000/Shibboleth.sso/SLO/SOAP" target="_blank">http://10.10.10.3:50<wbr>00/Shibboleth.sso/SLO/SOAP</a>"/></div>
<div>    <md:SingleLogoutService Binding="urn:oasis:names:tc:SA<wbr>ML:2.0:bindings:HTTP-Redirect" Location="<a href="http://10.10.10.3:5000/Shibboleth.sso/SLO/Redirect" target="_blank">http://10.10.10.3:50<wbr>00/Shibboleth.sso/SLO/Redirect</a><wbr>"/></div>
<div>    <md:SingleLogoutService Binding="urn:oasis:names:tc:SA<wbr>ML:2.0:bindings:HTTP-POST" Location="<a href="http://10.10.10.3:5000/Shibboleth.sso/SLO/POST" target="_blank">http://10.10.10.3:50<wbr>00/Shibboleth.sso/SLO/POST</a>"/></div>
<div>    <md:SingleLogoutService Binding="urn:oasis:names:tc:SA<wbr>ML:2.0:bindings:HTTP-Artifact" Location="<a href="http://10.10.10.3:5000/Shibboleth.sso/SLO/Artifact" target="_blank">http://10.10.10.3:50<wbr>00/Shibboleth.sso/SLO/Artifact</a><wbr>"/></div>
<div>    <md:AssertionConsumerService Binding="urn:oasis:names:tc:SA<wbr>ML:2.0:bindings:HTTP-POST" Location="<a href="http://10.10.10.3:5000/Shibboleth.sso/SAML2/POST" target="_blank">http://10.10.10.3:50<wbr>00/Shibboleth.sso/SAML2/POST</a>" index="1"/></div>
<div>    <md:AssertionConsumerService Binding="urn:oasis:names:tc:SA<wbr>ML:2.0:bindings:HTTP-POST-Simp<wbr>leSign" Location="<a href="http://10.10.10.3:5000/Shibboleth.sso/SAML2/POST-SimpleSign" target="_blank">http://10.10.10.3:50<wbr>00/Shibboleth.sso/SAML2/POST-<wbr>SimpleSign</a>"
 index="2"/></div>
<div>    <md:AssertionConsumerService Binding="urn:oasis:names:tc:SA<wbr>ML:2.0:bindings:HTTP-Artifact" Location="<a href="http://10.10.10.3:5000/Shibboleth.sso/SAML2/Artifact" target="_blank">http://10.10.10.3:50<wbr>00/Shibboleth.sso/SAML2/Artifa<wbr>ct</a>"
 index="3"/></div>
<div>    <md:AssertionConsumerService Binding="urn:oasis:names:tc:SA<wbr>ML:2.0:bindings:PAOS" Location="<a href="http://10.10.10.3:5000/Shibboleth.sso/SAML2/ECP" target="_blank">http://10.10.10.3:50<wbr>00/Shibboleth.sso/SAML2/ECP</a>" index="4"/></div>
<div>    <md:AssertionConsumerService Binding="urn:oasis:names:tc:SA<wbr>ML:1.0:profiles:browser-post" Location="<a href="http://10.10.10.3:5000/Shibboleth.sso/SAML/POST" target="_blank">http://10.10.10.3:50<wbr>00/Shibboleth.sso/SAML/POST</a>" index="5"/></div>
<div>    <md:AssertionConsumerService Binding="urn:oasis:names:tc:SA<wbr>ML:1.0:profiles:artifact-01" Location="<a href="http://10.10.10.3:5000/Shibboleth.sso/SAML/Artifact" target="_blank">http://10.10.10.3:50<wbr>00/Shibboleth.sso/SAML/Artifac<wbr>t</a>"
 index="6"/></div>
<div>  </md:SPSSODescriptor></div>
<div><br>
</div>
<div></md:EntityDescriptor></div>
</div>
<div><br>
</div>
-- <br>
<div class="x_m_2171043697628380184x_gmail_signature">
<div dir="ltr">
<div>Kind regards
<div>Dmitry Ukov</div>
<div>Principal Deployment Engineer</div>
<div>
<div>Mirantis, Inc.</div>
</div>
<div><br>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
<br>
--<br>
For Consortium Member technical support, see <a href="https://wiki.shibboleth.net/confluence/x/coFAAg" rel="noreferrer" target="_blank">
https://wiki.shibboleth.net/<wbr>confluence/x/coFAAg</a><br>
To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net">
users-unsubscribe@shibboleth.<wbr>net</a><br>
</blockquote>
</div>
<br>
<br clear="all">
<div><br>
</div>
-- <br>
<div class="x_gmail_signature">
<div dir="ltr">
<div>Kind regards
<div>Dmitry Ukov</div>
<div>Principal Deployment Engineer</div>
<div>
<div>Mirantis, Inc.</div>
</div>
<div><br>
</div>
</div>
</div>
</div>
</div>
</div>
</body>
</html>