Skip Navigation

Search

.PEM SAML signing certificate with no line breaks does not work
Answer ID 12261   |   Last Review Date 06/14/2022

Why isn't our new certificate working?

Environment:
 
Oracle B2C Service
Identity provider-initiated SSO
Customer Portal contact login with SAML 2.0
New signing certificate
 
Issue:
 
We uploaded a new certificate. SSO logins are failing. Security log shows "Error validating certificate that was used to sign the SSO token."
 
Resolution:
 
Edit the .pem certificate file in a text editor such as Notepad++ that will allow you to add UNIX-style line breaks (\n).
  • After -----BEGIN CERTIFICATE----- start a new line.
  • Then put a line break after every 64 characters in the certificate.
    In Notepad++ the status bar would say Col: 65 at the point where you add the break.
  • Lastly, ensure there is a line break before -----END CERTIFICATE-----.
If the certificate is not self-signed, you can add the necessary certificates in order afterwards with the root last.
 
Cause:
 
Oracle B2C Service requires the lines of .pem certificates to be 64 characters long.
 
Notes:
 
As an example, here is the certificate your browser is using at the time of this writing to connect to this website, formatted as expected.
 
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Was this answer helpful?

Still have questions?

Notify Me
Forgot your username or password?
The page will refresh upon submission. Any pending input will be lost.