Quantcast
Channel: Claims based access platform (CBA), code-named Geneva forum
Viewing all articles
Browse latest Browse all 2535

How to resolve the error @Passive client: The X.509 certificate CN=Geneva Signing Certificate is not in the trusted people store

$
0
0
I am working with the WCF sample "C:\Program Files\Windows Identity Foundation SDK\v3.5\Samples\Quick Start\Using Managed STS\ClaimsAwareWebAppWithManagedSTS".

At the passive client side I am getting the following error...

Source Error:

An unhandled exception was generated during the execution of the current web request. Information regarding the origin and location of the exception can be identified using the exception stack trace below.

Stack Trace:

[SecurityTokenValidationException: The X.509 certificate CN=Geneva Signing Certificate is not in the trusted people store. The X.509 certificate CN=Geneva Signing Certificate chain building failed. The certificate that was used has a trust chain that cannot be verified. Replace the certificate or change the certificateValidationMode. A certificate chain processed, but terminated in a root certificate which is not trusted by the trust provider.
]
System.IdentityModel.Selectors.PeerOrChainTrustValidator.Validate(X509Certificate2 certificate) +178
Microsoft.IdentityModel.X509CertificateValidatorEx.Validate(X509Certificate2 certificate) +73
Microsoft.IdentityModel.Tokens.Saml11.Saml11SecurityTokenHandler.ValidateToken(SecurityToken token) +385

[SecurityTokenValidationException: ID4257: X.509 certificate 'CN=Geneva Signing Certificate' validation failed by the token handler.]
Microsoft.IdentityModel.Tokens.Saml11.Saml11SecurityTokenHandler.ValidateToken(SecurityToken token) +495
Microsoft.IdentityModel.Tokens.SecurityTokenHandlerCollection.ValidateToken(SecurityToken token) +86
Microsoft.IdentityModel.Web.TokenReceiver.AuthenticateToken(SecurityToken token, Boolean ensureBearerToken, String endpointUri) +98
Microsoft.IdentityModel.Web.WSFederationAuthenticationModule.SignInWithResponseMessage(HttpRequest request) +406
Microsoft.IdentityModel.Web.WSFederationAuthenticationModule.OnAuthenticateRequest(Object sender, EventArgs args) +268
System.Web.SyncEventExecutionStep.System.Web.HttpApplication.IExecutionStep.Execute() +102
System.Web.HttpApplication.ExecuteStep(IExecutionStep step, Boolean& completedSynchronously) +75


Since this is not a product environment I am using the certificate that gets generated by Geneva Initial configuration wizard. The error states that I can "change the certificateValidationMode".

Can someone please guide me on how that can be done to resolve this issue?

Thanks!!

Viewing all articles
Browse latest Browse all 2535

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>