Shibboleth Developers

[Scott Cantor <>]

> FYI, I just tried the link below, tried to go to the Blogger, 
> and I got this response from the target after traversing the wayf/HS
> process:
> 
> SHIRE failure at (/shibboleth/SHIRE)
> 
> edu.internet2.middleware.shibboleth.shire.ShireException: 
> Error processing SAML assertion: org.opensaml.SAMLException: 
> ShibPOSTProfile.accept() detected an untrusted HS for the origin site

I suspect the blogger needs to have it's site registry web.xml setting
updated to shibprod0. The old one isn't the same.

> Also, the WAYF's ssl certificate wasn't trusted by my browser.

Quite true. It's the bossie CA run by Eric Norman, right now. It needs
to be reissued for wayf.internet2.edu and signed by Verisign, but I
don't know when that's going to happen.

-- Scott

------------------------------------------------------mace-shib-design-+
For list utilities, archives, subscribe, unsubscribe, etc. please visit the
ListProc web interface at 

    http://archives.internet2.edu/

------------------------------------------------------mace-shib-design--