Pilot admin certificate

  • 3
  • Problem
  • Updated 3 years ago
  • Solved
  • (Edited)
I'm getting a certificate error when I log into PILOT Admin and Report Center.  I can get in with IE, but Chrome is not allowing it. 
Photo of Kyle Mack

Kyle Mack

  • 86 Posts
  • 3 Reply Likes

Posted 3 years ago

  • 3
Photo of Merrie Wales

Merrie Wales, Official Rep

  • 921 Posts
  • 50 Reply Likes
Kyle,
I tried with Chrome and Firefox and received the following error:



Is that what you are seeing?
Photo of Kyle Mack

Kyle Mack

  • 86 Posts
  • 3 Reply Likes
Yes that's what I'm getting over here.
Photo of William Diehl

William Diehl

  • 47 Posts
  • 5 Reply Likes
Yeah, looks like it's both expired and domain mis-matched. I'm not sure if my IDP is sending me to the correct domain (the cert wants pilot.admin.openccc.net or www.pilot.admin.openccc.net and I'm using ci.control.openccc.net) but the expiration is something that should be fixed asap.
Photo of Merrie Wales

Merrie Wales, Official Rep

  • 921 Posts
  • 50 Reply Likes
William / Kyle
The engineers are working this issue currently.
Photo of Merrie Wales

Merrie Wales, Official Rep

  • 921 Posts
  • 50 Reply Likes
Kyle / William,
Will you please try to access, and let us know here if you are successful.
Photo of Kyle Mack

Kyle Mack

  • 86 Posts
  • 3 Reply Likes
I'm in.  Thank you.
Photo of Merrie Wales

Merrie Wales, Official Rep

  • 921 Posts
  • 50 Reply Likes
Great, thank you for your notification first thing this AM!
Photo of William Diehl

William Diehl

  • 47 Posts
  • 5 Reply Likes
Harum haroom.
Unfortunately I'm now getting this cheery message,

opensaml::FatalProfileException
The system encountered an error at Fri Sep 2 18:19:50 2016
To report this problem, please contact the site administrator at root@localhost.
Please include the following message in any email:
opensaml::FatalProfileException at (https://ci.control.openccc.net/Shibboleth.sso/SAML2/POST)
Unable to establish security of incoming assertion.

Probably something on our side doesn't like the new SSL certificate. I wonder who the certificate authority is and whether we trust it on our side. Guess I'll have to check with our IT Dept.
Photo of Merrie Wales

Merrie Wales, Official Rep

  • 921 Posts
  • 50 Reply Likes
William,
Your link should look something like this:
https://{yourDomain}/idp/profile/SAML...
Photo of William Diehl

William Diehl

  • 47 Posts
  • 5 Reply Likes
Yes, our IDP was working fine, even this morning (except for the SSL errors), until the new cert was applied. Our URL matches your example :)
Photo of Merrie Wales

Merrie Wales, Official Rep

  • 921 Posts
  • 50 Reply Likes
William,
In that Coast is now able to access I sent you an email asking for your link, so the engineers can continue troubleshooting.
Photo of Kyle Mack

Kyle Mack

  • 86 Posts
  • 3 Reply Likes
I'm now receiving the same error that William is getting.  Multiple browsers.
(Edited)
Photo of Merrie Wales

Merrie Wales, Official Rep

  • 921 Posts
  • 50 Reply Likes
Will you both try to access again the team just did a restart
Photo of Kyle Mack

Kyle Mack

  • 86 Posts
  • 3 Reply Likes
Now I'm getting this. 
Photo of William Diehl

William Diehl

  • 47 Posts
  • 5 Reply Likes
I'm now able to successfully connect (1:40pm)!
Photo of Kyle Mack

Kyle Mack

  • 86 Posts
  • 3 Reply Likes
Same here.  Thanks William.
Photo of Merrie Wales

Merrie Wales, Official Rep

  • 921 Posts
  • 50 Reply Likes
Thank you both.