Hi George, You should either upload a public key or certificate to the Google Apps Dashboard. Please store the private key in a secure location where your SSO code can use it to generate signatures for your SAML responses.
I hope this helps. Thanks, --Tony On Sep 30, 6:51 am, George <[EMAIL PROTECTED]> wrote: > The problem is on my PC...I managed to do keys and certificate on an > other PC. However, I'm still not sure if and where I should upload the > keys. I uploaded the certificate using Google Apps Dashboard. > > Any insight will be much appreciated. > > On Sep 30, 1:21 am, George <[EMAIL PROTECTED]> wrote: > > > Hi > > > I'm new to SSO. I've been trying to sort this out for the last 10hrs > > or so and am getting quite desperate... > > > I am following the instructions here: > > >http://code.google.com/apis/apps/sso/saml_reference_implementation_we... > > > however, I cannot create the required certifcate as instructed here: > > >http://code.google.com/apis/apps/articles/sso-keygen.html > > > Using openssl I get the following errors: > > > When creating DSA key: > > OpenSSL> gendsa -out dsaprivkey.pem dsaparam.pem > > : Invalid argument > > 716:error:0200107B:system library:fopen:Unknown error:.\crypto\bio > > \bss_file.c:35 > > ','rb')('dsaparam.pem > > 716:error:20074002:BIO routines:FILE_CTRL:system lib:.\crypto\bio > > \bss_file.c:358 > > : > > error in gendsa > > > and when trying to fill in the certificate: > > > Country Name (2 letter code) [AU]:mt > > string is too long, it needs to be less than 2 bytes long > > Country Name (2 letter code) [AU]:. > > problems making Certificate Request > > 716:error:0D07A07C:asn1 encoding routines:ASN1_mbstring_ncopy:illegal > > characters > > :.\crypto\asn1\a_mbstr.c:162: > > error in req > > > Any help will be much appreciated > > > thanks --~--~---------~--~----~------------~-------~--~----~ You received this message because you are subscribed to the Google Groups "Google Apps APIs" group. To post to this group, send email to [email protected] To unsubscribe from this group, send email to [EMAIL PROTECTED] For more options, visit this group at http://groups.google.com/group/google-apps-apis?hl=en -~----------~----~----~----~------~----~------~--~---
