<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body>
<div class="moz-cite-prefix">On 11/28/2022 1:27 PM, Bhagwat,
Shrikant via users wrote:<br>
</div>
<blockquote type="cite"
cite="mid:DM5PR08MB3595FCEFF3668279FC542F678A139@DM5PR08MB3595.namprd08.prod.outlook.com">
<p class="MsoNormal">2022-11-28 18:58:49 INFO
XMLTooling.SecurityHelper : loading private key from file
(/etc/shibboleth/sp-encrypt-key.pem)<o:p></o:p></p>
<p class="MsoNormal">2022-11-28 18:58:49 INFO
XMLTooling.SecurityHelper : loading certificate(s) from file
(/etc/shibboleth/sp-encrypt-key.pem)<o:p></o:p></p>
<p class="MsoNormal">2022-11-28 18:58:49 ERROR OpenSSL : error
code: 151584876 in ../crypto/pem/pem_lib.c, line 745<o:p></o:p></p>
<p class="MsoNormal">2022-11-28 18:58:49 ERROR OpenSSL : error
data: Expecting: CERTIFICATE<o:p></o:p></p>
<p class="MsoNormal">2022-11-28 18:58:49 ERROR
XMLTooling.CredentialResolver.Chaining : caught exception
processing embedded CredentialResolver element: Unable to load
certificate(s) from file (/etc/shibboleth/sp-encrypt-key.pem).<o:p></o:p></p>
[...]<br>
Any Idea ?</blockquote>
<p><br>
</p>
<p>Looks like you're trying to load a private key file as the
certificate - you probably want sp-encrypt-cert.pem instead for
the cert file in your CredentialResolver.<br>
</p>
<pre class="moz-signature" cols="72">--
%% Christopher A. Bongaarts %% <a class="moz-txt-link-abbreviated" href="mailto:cab@umn.edu">cab@umn.edu</a> %%
%% OIT - Identity Management %% <a class="moz-txt-link-freetext" href="http://umn.edu/~cab">http://umn.edu/~cab</a> %%
%% University of Minnesota %% +1 (612) 625-1809 %%
</pre>
</body>
</html>