{"action":"created","issue":{"url":"https://api.github.com/repos/KentorIT/authservices/issues/537","repository_url":"https://api.github.com/repos/KentorIT/authservices","labels_url":"https://api.github.com/repos/KentorIT/authservices/issues/537/labels{/name}","comments_url":"https://api.github.com/repos/KentorIT/authservices/issues/537/comments","events_url":"https://api.github.com/repos/KentorIT/authservices/issues/537/events","html_url":"https://github.com/KentorIT/authservices/issues/537","id":167886232,"number":537,"title":"signingCertificate fails for cert without private key","user":{"login":"tonesnotes","id":1954314,"avatar_url":"https://avatars.githubusercontent.com/u/1954314?v=3","gravatar_id":"","url":"https://api.github.com/users/tonesnotes","html_url":"https://github.com/tonesnotes","followers_url":"https://api.github.com/users/tonesnotes/followers","following_url":"https://api.github.com/users/tonesnotes/following{/other_user}","gists_url":"https://api.github.com/users/tonesnotes/gists{/gist_id}","starred_url":"https://api.github.com/users/tonesnotes/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/tonesnotes/subscriptions","organizations_url":"https://api.github.com/users/tonesnotes/orgs","repos_url":"https://api.github.com/users/tonesnotes/repos","events_url":"https://api.github.com/users/tonesnotes/events{/privacy}","received_events_url":"https://api.github.com/users/tonesnotes/received_events","type":"User","site_admin":false},"labels":[{"id":56608164,"url":"https://api.github.com/repos/KentorIT/authservices/labels/question","name":"question","color":"cc317c","default":true}],"state":"closed","locked":false,"assignee":null,"assignees":[],"milestone":{"url":"https://api.github.com/repos/KentorIT/authservices/milestones/4","html_url":"https://github.com/KentorIT/authservices/milestone/4","labels_url":"https://api.github.com/repos/KentorIT/authservices/milestones/4/labels","id":563752,"number":4,"title":"Not in Release","description":"Dummy milestone for closed stuff that shouldn't be in a release. Used to make it easier to find out what's newly closed when doing a release.\r\n\r\n<!---\r\n@huboard:{\"order\":19.0}\r\n-->\r\n","creator":{"login":"AndersAbel","id":4894558,"avatar_url":"https://avatars.githubusercontent.com/u/4894558?v=3","gravatar_id":"","url":"https://api.github.com/users/AndersAbel","html_url":"https://github.com/AndersAbel","followers_url":"https://api.github.com/users/AndersAbel/followers","following_url":"https://api.github.com/users/AndersAbel/following{/other_user}","gists_url":"https://api.github.com/users/AndersAbel/gists{/gist_id}","starred_url":"https://api.github.com/users/AndersAbel/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/AndersAbel/subscriptions","organizations_url":"https://api.github.com/users/AndersAbel/orgs","repos_url":"https://api.github.com/users/AndersAbel/repos","events_url":"https://api.github.com/users/AndersAbel/events{/privacy}","received_events_url":"https://api.github.com/users/AndersAbel/received_events","type":"User","site_admin":false},"open_issues":5,"closed_issues":218,"state":"open","created_at":"2014-02-09T20:39:14Z","updated_at":"2016-11-24T12:48:04Z","due_on":null,"closed_at":null},"comments":6,"created_at":"2016-07-27T15:39:44Z","updated_at":"2017-02-13T13:04:33Z","closed_at":"2016-07-28T18:17:00Z","body":"I'm trying to load an idP provided certificate using xml like this in web.config:\n\n```\n    <signingCertificate storeName = \"AddressBook\" storeLocation=\"LocalMachine\" x509FindType=\"FindByThumbprint\" findValue=\"‎eb 6a 96 fb 08 3d fb 2e 5e ab 56 dc 3e a2 df 86 82 c7 c8 39\" />\n```\n\nWhich works for the usual Kentor cert (which includes a private key, thumbprint=\"d3 41 8d bf fd 46 e0 e4 b8 a9 bb 2f 43 c4 ac d4 7a ef be 52\"), but not for the client's cert (which does not include a private key).\n\nThe error is the usual: Finding cert through FindByThumbprint in LocalMachine:AddressBook with value ‎eb 6a 96 fb 08 3d fb 2e 5e ab 56 dc 3e a2 df 86 82 c7 c8 39 matched 0 certificates. A unique match is required.\n\nIs this supported? Are there other differences between certs that explain why one works and the other doesn't?\n"},"comment":{"url":"https://api.github.com/repos/KentorIT/authservices/issues/comments/279387078","html_url":"https://github.com/KentorIT/authservices/issues/537#issuecomment-279387078","issue_url":"https://api.github.com/repos/KentorIT/authservices/issues/537","id":279387078,"user":{"login":"spanout","id":1569544,"avatar_url":"https://avatars.githubusercontent.com/u/1569544?v=3","gravatar_id":"","url":"https://api.github.com/users/spanout","html_url":"https://github.com/spanout","followers_url":"https://api.github.com/users/spanout/followers","following_url":"https://api.github.com/users/spanout/following{/other_user}","gists_url":"https://api.github.com/users/spanout/gists{/gist_id}","starred_url":"https://api.github.com/users/spanout/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/spanout/subscriptions","organizations_url":"https://api.github.com/users/spanout/orgs","repos_url":"https://api.github.com/users/spanout/repos","events_url":"https://api.github.com/users/spanout/events{/privacy}","received_events_url":"https://api.github.com/users/spanout/received_events","type":"User","site_admin":false},"created_at":"2017-02-13T13:04:33Z","updated_at":"2017-02-13T13:04:33Z","body":"HI Anders \r\n\r\nI have tried many approaches on this and please forgive me if this is a simple question. I have an x509 cert from the IDP, I am the SP and they want my auth requests signed. I am pointing to their x509 cert using the storename and find by thumbprint, but i get the error as the guy above gets:  _Provided certificate is not valid because it does not contain a private key._\r\n\r\nDo I have to create my own signing certificate to sign the request or should I use the IDP public key? I am sorry if this is an amateur question\r\n\r\n"}}
{"actor":{"display_login":"spanout"}}