Comments (7)
Seems extremely unlikely that the size of the certs has anything to do with this.
More likely, something is different about the new certs, such as being signed by a different CA which your system doesn't trust.
Can you show a more detailed error output?
from gp-saml-gui.
gp-saml-gui: error: SSL certificate error (try --no-verify to ignore): [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get local issuer certificate (_ssl.c:1131)
from gp-saml-gui.
Yes, this means that the cert's issuer is untrusted. Presumably the root/CA has changed from the new one to the old one.
Did you try --no-verify
to just ignore it? (Which is insecure)
from gp-saml-gui.
They don't seem to think that there's a problem with the certificates, but I'll keep trying.
Yes, I can get everything to work using the --no-verify option.
Thanks.
from gp-saml-gui.
They don't seem to think that there's a problem with the certificates, but I'll keep trying.
It's not a "problem" with the certificates per se; it's (likely) a problem with your system not having the root certificates to verify them.
Without knowing any details of the specific certs (or the OS you're using, etc) it's basically impossible for me to speculate. Use https://crt.sh/?q=YOUR.DOMAIN.NAME for an online analyzer, or https://www.ssllabs.com/ssltest/analyze.html?d=YOUR.DOMAIN.NAME for a more extensive one, or certtool -i < your_cert_file
for an offline tool.
from gp-saml-gui.
Ha! Thank you!
https://crt.sh/?q=YOUR.DOMAIN.NAME reports "Certificates: None found"
https://www.ssllabs.com/ssltest/analyze.html?d=YOUR.DOMAIN.NAME reports "This server's certificate chain is incomplete."
I'll send this information to the powers that be.
from gp-saml-gui.
Ha! Thank you!
https://crt.sh/?q=YOUR.DOMAIN.NAME reports "Certificates: None found"
https://www.ssllabs.com/ssltest/analyze.html?d=YOUR.DOMAIN.NAME reports "This server's certificate chain is incomplete."
I sent this to the powers that be and they fixed the issue. Thanks again.
from gp-saml-gui.
Related Issues (20)
- Install fails under Ubuntu 23.10 with ERROR: Dependency 'gobject-introspection-1.0' is required but not found. HOT 1
- After successful login screen stuck out HOT 1
- misleading openconnect_command print with -E HOT 2
- Add to Gentoo package repository HOT 1
- not working all of a sudden HOT 7
- Tested in Debian 12 and it does not open display HOT 1
- AttributeError: 'NoneType' object has no attribute 'get_content_type'
- HTTP body length: (0) HOT 10
- Microsoft SAML contains XML in comment HOT 4
- Can it use not webkit but Firefox? HOT 3
- Include needed apt dependencies for ubuntu HOT 1
- Cannot set verify_mode to CERT_NONE when check_hostname is enabled. HOT 3
- webkit crash with some nvidia drivers HOT 1
- Empty login screen HOT 1
- fgets (stdin): Inappropriate ioctl for device HOT 3
- Add support for using private keys encrypted with fsid
- 'Unexpected 200 result from server' on openconnect
- Blank SAML Login Window HOT 3
- Need to pass --csd-wrapper=(wrapper) command-line argument HOT 1
- Ubuntu 24.04 support HOT 6
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from gp-saml-gui.