<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<style type="text/css" style="display:none;"><!-- P {margin-top:0;margin-bottom:0;} --></style>
</head>
<body dir="ltr">
<div id="divtagdefaultwrapper" style="font-size:12pt;color:#000000;font-family:Calibri,Helvetica,sans-serif;" dir="ltr">
<p>Good Evening!</p>
<p><br>
</p>
<p>Please correct me if I have a fundamental misunderstanding of how certificates work on the idp side, I inherited this system and I'm still getting my bearings.</p>
<p><br>
</p>
<p>Currently, we have two servers configured with a vIP (keepalived) for high availability. itfederation.jmu.edu is the FQDN for the vIP, then the two servers are named it-federation1.jmu.edu and it-federation2.jmu.edu. We've replicated this setup in a dev
environment as well. All of the above, to my knowledge, have ssl certs signed by InCommon.</p>
<p><br>
</p>
<p>Here is my confusion. We received e-mail notification that the cert for it-federation2.jmu.edu is expiring. I cannot locate the corresponding cert on the server. If I navigate to itfederation.jmu.edu in a browser, I can pull cert information for itfederation.jmu.edu.
I cannot find the cooresponding certificate or key information for itfederation.jmu.edu on the file systems of either it-federation1 or it-federation2. If I navigate to either fed1 or fed2 directly via web browser, neither have valid certificates.</p>
<p><br>
</p>
<p>My question is, how are certificates for the idp stored in a HA shib installation with keepalived and jetty? Are they imported into a keystore? Are they stored in a file other than a .crt, .cer or .pem?</p>
<p><br>
</p>
<p>Thank you!<br>
</p>
<p><br>
</p>
<div id="Signature">
<div id="divtagdefaultwrapper" dir="ltr" style="font-size: 12pt; color: rgb(0, 0, 0); font-family: Calibri, Helvetica, sans-serif, "EmojiFont", "Apple Color Emoji", "Segoe UI Emoji", NotoColorEmoji, "Segoe UI Symbol", "Android Emoji", EmojiSymbols;">
<p>--</p>
<p>Jack Garmer</p>
<p>Linux Systems Administrator </p>
<p><span style="font-size:12pt">James Madison University, IT Technical Services</span></p>
<p><span style="font-size:12pt"><br>
</span></p>
<p><span style="font-size:12pt">w: 540-568-4235 | c: 540-290-2154</span><br>
</p>
</div>
</div>
</div>
</body>
</html>