Re: [Unity-idm-discuss] certificate renewal from external IdPs has issues on unity 3.9.0

[Sander A. <sa....@fz...>]

Good morning,
it seems that we found the root of the problem. The server where we had
the problems, did not update the downloaded metadata files since 2
weeks. After removing them and restarting unity new versions were
downloaded and login is working.

Best regards,
Sander

On Mon, 2022-08-15 at 07:55 +0200, Sander Apweiler wrote:
> Good morning Krzysztof,
> good morning Roman,
> 
> unity 3.9.0 has some issues on certificate renewal of remote IdPs. We
> know 3 IdPs which renewed their certificate last week and connected
> via
> federation metadata. We have five unity instances running and on four
> the renewal worked, but on one not. Because it is not the same
> instance, we do not expect that it is a problem of the instance
> itself.
> 
> The problem in the log is:
> Caused by: eu.unicore.samly2.exceptions.SAMLValidationException:
> Message signed with a key RSA Public Key
> [ec:fe:73:15:c9:8d:5b:b7:f2:29:8f:14:d4:0c:7b:97:dd:77:18:f8],[56:66:
> d1
> :a4]
>         modulus:
> d1d91621db1e94605080cb67adb38b7fce48a377788402fadb7f1fc247468a09fec00
> d0
> a4ed28a0248888bab2d7677c4f849713386a9637e1b4d7ece6e249d52946abbb03607
> 0b
> 2e9c3254acfe475c7cb0bc80e15a2acdbf05b6d7308b89529dbbec2fd39f5b16097cf
> 5c
> f39233ac1fd35875a1faae0c5fba2639a1068dd4d0347a3d82af2a3decb41a8bd7cc9
> 0f
> 82c5959ba80452081ec4388e5720df4d20a45113b0f9fd4c786864a0d5d646dc78425
> 2a
> f5b76a5558e683e963c39d54197f04b6145341a9114ab4039a21e653d42d2029caa1b
> 81
> e0e276f86fefa7f6e941dd0a42d31683dbf7fd7b854512417900e37cb10cf809d31a4
> fb
> 7e625877fcdfe3e7ceb5c1e4ed38fc67b1685ed2d5335309e42cf60859e5ca38022b6
> 84
> 9916d222f1c290090bb2e7523bc6f666bdc0714c9570382a1e49037f79a03bb0c07cf
> 4d
> 6446b6b1e9f176b375b414a0bb1905d789853bf6d39e9212f359ea39b1b6fb1bfe8de
> e8
> 19a8a5d4efbe1b4864d797c26bbe289e09bbfb2ac9a9149c7eb529f743a3d10f65584
> 87
> 0adc9fdfcf4d7d6a6cff1c890998db9f9726b975446f469c6f8d30a77b9be1d6ed115
> bf
> 80e62916b156ca67be4f1faf9ac423df9ae7fade2b7dffb22ea95bafcd5b724391b09
> da
> f4deb5e48ea5564ac56cdcb0828732fa408165a17d1a8a3b1088920b3eaa1132cba57
> 66
> bf124c1fb824a4fd226d815c9140a1
> public exponent: 10001
>  not registered for https://idp.desy.de/idp/shibboleth
> 
> Best regards,
> Sander

-- 
Federated Systems and Data
Juelich Supercomputing Centre

phone: +49 2461 61 8847
fax: +49 2461 61 6656
email: sa....@fz...

-----------------------------------------------------------------------
-----------------------------------------------------------------------
Forschungszentrum Juelich GmbH
52425 Juelich
Sitz der Gesellschaft: Juelich
Eingetragen im Handelsregister des Amtsgerichts Dueren Nr. HR B 3498
Vorsitzender des Aufsichtsrats: MinDir Volker Rieke
Geschaeftsfuehrung: Prof. Dr.-Ing. Wolfgang Marquardt (Vorsitzender),
Karsten Beneke (stellv. Vorsitzender), Prof. Dr. Astrid Lambrecht,
Prof. Dr. Frauke Melchior
-----------------------------------------------------------------------
-----------------------------------------------------------------------