CoSign: Collaborative Single Sign-On  

cosign-discuss at
general discussion of cosign development and deployment

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: new jcosign service produces error message at authn

I'm looking for anyone on this list with a working JCoSign configuration to help me out here.

Problems thus far seem to be related to my certs. After some more work with this, I am seeing a Java error: Untrusted Server Certificate
  Chain at

I am using a cert signed by the local umweb ca, and I had to import the ca's cert to my Java installation's cacerts keystore in order to get my cert to import. IOW, it seemed to validate the trust chain ok on import.

Does anyone else use a umwebca-signed cert for JCoSign? If not, what do you use? (Entrust? InstantSSL?)


Cory Snavely wrote:
OK, I have the behavior reproducing now.

To see it, or generate more log entries, go to

and click on any of the authentication-only options in the bottom left, like "My Deep Blue".

You will go to and get the error message

"Unable to determine referring service from query string."

If I change the service name to something starting with "cosign-" instead, authentication will proceed but I get either a "too many redirects" from my browser or the looping page from CoSign.



Wesley Craig wrote:

We don't see anything in the logs on the Perhaps we should have you point to We'll be able to see how your server is interacting with the cosign server better that way.


On 16 Mar 2005, at 08:59, Cory Snavely wrote:

A lame attempt to solve this by setting


gets me further, but eventually fails with too many redirects. It is as if, after authenticating, that JCoSign doesn't recognize authentication has happened, and re-prompts (re-redirects).

Does this make any sense to anyone? I'm sort of at a loss here, but have the feeling this is something simple.

Copyright © 2002 - 2004 Regents of the University of Michigan :  Page last updated 15-December-2010