<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<style type="text/css" style="display:none;"><!-- P {margin-top:0;margin-bottom:0;} --></style>
</head>
<body dir="ltr">
<div id="divtagdefaultwrapper" dir="ltr" style="font-size: 12pt; color: rgb(0, 0, 0); font-family: Calibri, Helvetica, sans-serif, EmojiFont, "Apple Color Emoji", "Segoe UI Emoji", NotoColorEmoji, "Segoe UI Symbol", "Android Emoji", EmojiSymbols;">
<p style="margin-top:0; margin-bottom:0">Hi,</p>
<p style="margin-top:0; margin-bottom:0"><br>
</p>
<p style="margin-top:0; margin-bottom:0">We are trying to load remote IDP meatdata in our SP, for some reason it is giving us below exception in shibd.log,</p>
<p style="margin-top:0; margin-bottom:0">=========================== </p>
<p style="margin-top:0; margin-bottom:0"></p>
<div>OpenSAML.MetadataProvider : building MetadataFilter of type RequireValidUntil</div>
<div>2019-01-08 10:01:35 INFO OpenSAML.MetadataProvider : building MetadataFilter of type Signature</div>
<div><b>2019-01-08 10:01:35 INFO XMLTooling.SecurityHelper : loading certificate(s) from file (/appbin/web/shibboleth-sp/etc/shibboleth/idp-signing.crt)</b></div>
<div><b>2019-01-08 10:01:35 INFO XMLTooling.CredentialResolver.File : no private key resolved, usable for verification/trust only</b></div>
<div>2019-01-08 10:01:35 INFO XMLTooling.StorageService : cleanup thread started...running every 900 seconds</div>
<div><b>2019-01-08 10:01:35 INFO OpenSAML.MetadataProvider.XML : loaded XML resource (https://eas.devshibboleth.comfin.ge.com:8443/idp/shibboleth)</b></div>
<div><b>2019-01-08 10:01:35 INFO OpenSAML.MetadataProvider : applying metadata filter (RequireValidUntil)</b></div>
<div><b>2019-01-08 10:01:35 INFO OpenSAML.MetadataProvider : applying metadata filter (Signature)</b></div>
<div><b>2019-01-08 10:01:35 WARN OpenSAML.MetadataFilter.Signature : filtering out entity at root of instance after failed signature check: Root metadata element was unsigned.</b></div>
<div><b>2019-01-08 10:01:35 WARN OpenSAML.MetadataProvider.XML : adjusted reload interval to 600 seconds</b></div>
<div><b>2019-01-08 10:01:35 WARN OpenSAML.MetadataProvider.XML : trying backup file, exception loading remote resource: SignatureMetadataFilter unable to verify signature at root of metadata instance.</b></div>
<div>2019-01-08 10:01:35 INFO OpenSAML.MetadataProvider.XML : using local backup of remote resource</div>
<div>2019-01-08 10:01:35 INFO OpenSAML.MetadataProvider.XML : loaded XML resource (/appbin/web/shibboleth-sp/etc/shibboleth/idp-metadata.xml)</div>
<div>2019-01-08 10:01:35 INFO OpenSAML.MetadataProvider : applying metadata filter (RequireValidUntil)</div>
<div>2019-01-08 10:01:35 INFO OpenSAML.MetadataProvider : applying metadata filter (Signature)</div>
<div>2019-01-08 10:01:35 INFO Shibboleth.Application : no TrustEngine specified or installed, using default of ExplicitKey</div>
<div>2019-01-08 10:01:35 INFO Shibboleth.Application : building AttributeExtractor of type XML...</div>
<div>2019-01-08 10:01:35 INFO Shibboleth.AttributeExtractor.XML : loaded XML resource (/appbin/web/shibboleth-sp/etc/shibboleth/attribute-map.xml)</div>
<div>2019-01-08 10:01:35 INFO Shibboleth.AttributeExtractor.XML : creating mapping for Attribute urn:oasis:names:tc:SAML:attribute:subject-id</div>
<p></p>
<p style="margin-top:0; margin-bottom:0"><span style="font-family: Calibri, Helvetica, sans-serif, EmojiFont, "Apple Color Emoji", "Segoe UI Emoji", NotoColorEmoji, "Segoe UI Symbol", "Android Emoji", EmojiSymbols; font-size: 16px;">===========================</span><br>
</p>
<p style="margin-top:0; margin-bottom:0"><span style="font-family: Calibri, Helvetica, sans-serif, EmojiFont, "Apple Color Emoji", "Segoe UI Emoji", NotoColorEmoji, "Segoe UI Symbol", "Android Emoji", EmojiSymbols; font-size: 16px;"><br>
</span></p>
<p style="margin-top:0; margin-bottom:0"><span style="font-family: Calibri, Helvetica, sans-serif, EmojiFont, "Apple Color Emoji", "Segoe UI Emoji", NotoColorEmoji, "Segoe UI Symbol", "Android Emoji", EmojiSymbols; font-size: 16px;">In shibd_warn.log we are
seeing below messages</span></p>
<p style="margin-top:0; margin-bottom:0"><span style="font-family: Calibri, Helvetica, sans-serif, EmojiFont, "Apple Color Emoji", "Segoe UI Emoji", NotoColorEmoji, "Segoe UI Symbol", "Android Emoji", EmojiSymbols; font-size: 16px;">==========================</span></p>
<p style="margin-top:0; margin-bottom:0"><span style="font-family: Calibri, Helvetica, sans-serif, EmojiFont, "Apple Color Emoji", "Segoe UI Emoji", NotoColorEmoji, "Segoe UI Symbol", "Android Emoji", EmojiSymbols; font-size: 16px;"></p>
<div>2019-01-08 10:01:35 WARN OpenSAML.MetadataFilter.Signature : filtering out entity at root of instance after failed signature check: Root metadata element was unsigned.</div>
<div>2019-01-08 10:01:35 WARN OpenSAML.MetadataProvider.XML : adjusted reload interval to 600 seconds</div>
<div>2019-01-08 10:01:35 WARN OpenSAML.MetadataProvider.XML : trying backup file, exception loading remote resource: SignatureMetadataFilter unable to verify signature at root of metadata instance.</div>
</span>
<p></p>
<p style="margin-top:0; margin-bottom:0"><span style="font-family: Calibri, Helvetica, sans-serif, EmojiFont, "Apple Color Emoji", "Segoe UI Emoji", NotoColorEmoji, "Segoe UI Symbol", "Android Emoji", EmojiSymbols; font-size: 16px;"><span style="font-family: Calibri, Helvetica, sans-serif, EmojiFont, "Apple Color Emoji", "Segoe UI Emoji", NotoColorEmoji, "Segoe UI Symbol", "Android Emoji", EmojiSymbols; font-size: 16px;">==========================</span><br>
</span></p>
<p style="margin-top:0; margin-bottom:0"><span style="font-family: Calibri, Helvetica, sans-serif, EmojiFont, "Apple Color Emoji", "Segoe UI Emoji", NotoColorEmoji, "Segoe UI Symbol", "Android Emoji", EmojiSymbols; font-size: 16px;"><span style="font-family: Calibri, Helvetica, sans-serif, EmojiFont, "Apple Color Emoji", "Segoe UI Emoji", NotoColorEmoji, "Segoe UI Symbol", "Android Emoji", EmojiSymbols; font-size: 16px;"><br>
</span></span></p>
<p style="margin-top:0; margin-bottom:0"><span style="font-family: Calibri, Helvetica, sans-serif, EmojiFont, "Apple Color Emoji", "Segoe UI Emoji", NotoColorEmoji, "Segoe UI Symbol", "Android Emoji", EmojiSymbols; font-size: 16px;"><span style="font-family: Calibri, Helvetica, sans-serif, EmojiFont, "Apple Color Emoji", "Segoe UI Emoji", NotoColorEmoji, "Segoe UI Symbol", "Android Emoji", EmojiSymbols; font-size: 16px;">After
it is unable to verify signature for remote metadata it is loading backup copy of metadata file, for which we do not see any signature validation errors in logs. Both files are same.</span></span></p>
<p style="margin-top:0; margin-bottom:0"><span style="font-family: Calibri, Helvetica, sans-serif, EmojiFont, "Apple Color Emoji", "Segoe UI Emoji", NotoColorEmoji, "Segoe UI Symbol", "Android Emoji", EmojiSymbols; font-size: 16px;"><span style="font-family: Calibri, Helvetica, sans-serif, EmojiFont, "Apple Color Emoji", "Segoe UI Emoji", NotoColorEmoji, "Segoe UI Symbol", "Android Emoji", EmojiSymbols; font-size: 16px;"><br>
</span></span></p>
<p style="margin-top:0; margin-bottom:0"><span style="font-family: Calibri, Helvetica, sans-serif, EmojiFont, "Apple Color Emoji", "Segoe UI Emoji", NotoColorEmoji, "Segoe UI Symbol", "Android Emoji", EmojiSymbols; font-size: 16px;"><span style="font-family: Calibri, Helvetica, sans-serif, EmojiFont, "Apple Color Emoji", "Segoe UI Emoji", NotoColorEmoji, "Segoe UI Symbol", "Android Emoji", EmojiSymbols; font-size: 16px;">Can
you please help us in figuring out this one.</span></span></p>
<p style="margin-top:0; margin-bottom:0"><span style="font-family: Calibri, Helvetica, sans-serif, EmojiFont, "Apple Color Emoji", "Segoe UI Emoji", NotoColorEmoji, "Segoe UI Symbol", "Android Emoji", EmojiSymbols; font-size: 16px;"><br>
</span></p>
<div id="Signature">
<div style="font-family:Tahoma; font-size:13px">
<div style="font-size:13px">
<div style="font-size:13px">
<div style="font-size:13px">
<div style="color:rgb(18,18,18); margin-top:0px; margin-right:0px; margin-bottom:0px">
<font><b>Thanks and Regards,</b></font></div>
<div style="margin-top:0px; margin-right:0px; margin-bottom:0px"><font color="#080808">Vikram Dalvi </font></div>
<div style="color:rgb(18,18,18); margin:0px"><br>
</div>
<div style="color:rgb(18,18,18); margin:0px"><font color="#080808"></font></div>
</div>
</div>
</div>
</div>
</div>
</div>
</body>
</html>