Release Notes › Web Agent Release Notes › Defects Fixed › Defects Fixed in 6.x QMR 5 › Wrong Private Key is Used to Sign Assertions (76161, 83118)

Previous Topic: Error Message for Failed Shared Memory/Semaphore Allocation Does Not Show errno Message (75110/82743)

Next Topic: Web Agent Terminated Abnormally When Resolving Agent Names Under Heavy Loads (75072)
Wrong Private Key is Used to Sign Assertions (76161, 83118)

Symptom:

The wrong key in the smkeydatabase is being used to sign assertions.

STAR Issue: 17507633+17527146;01

Solution:

To sign SAML 1.1 assertions, ensure that the correct certificate for each partnership is used when multiple affiliate domains are defined. If signed assertions are specified but no signing alias is selected, use the certificate corresponding to the defaultenterpriseprivatekey alias.