simplesamlphp -http error 500

[mk]

Hi, I am getting this error.. somebody please assist.

HTTP 500 error
That’s odd... the website can’t display this page
The site may be under maintenance or could have a programming error.
Try this
Go back to the last page

SimplesamlPHP logs -- Inside /var/logs/messages

Sep 22 18:32:15 192 simplesamlphp[12735]: 3 [4f9f0f646a] SimpleSAML_Error_Exception: Error 8 - Use of undefined constant MCRYPT_RIJNDAEL_128 - assumed 'MCRYPT_RIJNDAEL_128'
Sep 22 18:32:15 192 simplesamlphp[12735]: 3 [4f9f0f646a] Backtrace:
Sep 22 18:32:15 192 simplesamlphp[12735]: 3 [4f9f0f646a] 10 /var/simplesamlphp/www/_include.php:85 (SimpleSAML_error_handler)
Sep 22 18:32:15 192 simplesamlphp[12735]: 3 [4f9f0f646a] 9 /var/simplesamlphp/vendor/robrichards/xmlseclibs/src/XMLSecurityKey.php:103 (XMLSecurityKey::__construct)
Sep 22 18:32:15 192 simplesamlphp[12735]: 3 [4f9f0f646a] 8 /var/simplesamlphp/vendor/robrichards/xmlseclibs/src/XMLSecEnc.php:340 (XMLSecEnc::locateKey)
Sep 22 18:32:15 192 simplesamlphp[12735]: 3 [4f9f0f646a] 7 /var/simplesamlphp/vendor/simplesamlphp/saml2/src/SAML2/Utils.php:388 (SAML2_Utils::doDecryptElement)
Sep 22 18:32:15 192 simplesamlphp[12735]: 3 [4f9f0f646a] 6 /var/simplesamlphp/vendor/simplesamlphp/saml2/src/SAML2/Utils.php:529 (SAML2_Utils::decryptElement)
Sep 22 18:32:15 192 simplesamlphp[12735]: 3 [4f9f0f646a] 5 /var/simplesamlphp/vendor/simplesamlphp/saml2/src/SAML2/EncryptedAssertion.php:88 (SAML2_EncryptedAssertion::getAssertion)
Sep 22 18:32:15 192 simplesamlphp[12735]: 3 [4f9f0f646a] 4 /var/simplesamlphp/modules/saml/lib/Message.php:371 (sspmod_saml_Message::decryptAssertion)

from Apache --

Error_log

[Thu Sep 22 17:59:01 2016] [notice] caught SIGTERM, shutting down
[Thu Sep 22 17:59:02 2016] [notice] SELinux policy enabled; httpd running as context unconfined_u:system_r:httpd_t:s0
[Thu Sep 22 17:59:02 2016] [notice] suEXEC mechanism enabled (wrapper: /usr/sbin/suexec)
[Thu Sep 22 17:59:02 2016] [warn] RSA server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Sep 22 17:59:02 2016] [notice] Digest: generating secret for digest authentication ...
[Thu Sep 22 17:59:02 2016] [notice] Digest: done
[Thu Sep 22 17:59:02 2016] [warn] RSA server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Sep 22 17:59:02 2016] [notice] Apache/2.2.15 (Unix) DAV/2 PHP/5.5.38 mod_ssl/2.2.15 OpenSSL/1.0.1e-fips configured -- resuming normal operations

ssl_error_log

[Thu Sep 22 18:32:39 2016] [error] [client 192.168.8.53] PHP Fatal error:  Call to undefined function mcrypt_module_open() in /var/simplesamlphp/vendor/robrichards/xmlseclibs/src/XMLSecurityKey.php on line 329, referer: https://adfs.testad.com/adfs/ls/?SAMLRequest=nVJNb9swDP0rhu62LCdxYiEJkDYYFqDbgibdYZeBtulFgD48UdrHv5%2FqrFg7YD3sJPCR7%2FGR4prA6FHuYrjYe%2FwakUL2w2hLckpsWPRWOiBF0oJBkqGTp927O1kVpRy9C65zmj2jvM4AIvRBOcuyw37DPnflsiznq2HZAoCYt30tmvnQ1kPbwGIxm7WrZQP10IieZR%2FRU2JuWBJKdKKIB0sBbEhQKeq8bPKqOotSzio5W31i2T5NoyyEiXUJYSTJOfQDFSFloC86Z6aYa%2BIs2z2Zu3WWokF%2FQv9Ndfhwf%2FeHLpqqEPWqWBaLOSdlRo2PY3Pj%2BqixGC8jn2K6vlUOHU2oxehBh5xGlh1%2FL%2B5G2V7ZL6%2FvrL0WkXx7Ph%2Fz44fTmW3Xj9py2oHf%2Foc1g2l8CPCXszV%2Frru%2B3sb75OiwPzqtup%2FZG%2BcNhH8bFoWYENXnw1Qqo6UROzUoTH%2B409p9v%2FUIATcs%2BIiMb69NX97g9hc%3D&RelayState=https%3A%2F%2F192.168.7.54%2Fsimplesaml%2Fmodule.php%2Fcore%2Fauthenticate.php%3Fas%3Dneuralt-sp&SigAlg=http%3A%2F%2Fwww.w3.org%2F2000%2F09%2Fxmldsig%23rsa-sha1&Signature=aCSrHGhyPopkPiv5rehvc5O9Q62gNTXncMGTiV0C7zpajYthSLPAJ%2FdDGpUVzBHbyVjS7AqTlmq6VBmK54o1azWr5Z8JZbUrj0ycY4yDMxAolaif9OKCDl%2BO4UaEAf0%2Fw0mz%2Fu40j22mc5osoXMekkkyh8zcZjs6OLSyUyyZXlwAoyhnI5Pq1sOpZbhbeC3B4meXC58T6rM0SuB%2F3w5bk1s2M38X9OZWr4z67IrecFTXdvJk8om49ssdMioqHPFRPDHJdjUeKllVyWCT2ZRIxiIdVf5KzQbVarWFxeSPn9WcVsjvyaGNgAoFgTYhG29XoK3s2yWy00b0x9XdZqrskQ%3D%3D

Inside ADFS event logs:

The SSL certificate does not contain all UPN suffix values that exist in the enterprise.  Users with UPN suffix values not represented in the certificate will not be able to Workplace-Join their devices.  For more information, see http://go.microsoft.com/fwlink/?LinkId=311954.

[Peter Schober]

* mk <mereena...@gmail.com> [2016-09-22 12:43]:
> HTTP 500 error

That's PHP's way of telling you something is FUBAR.

> ssl_error_log

And here it is:

> [Thu Sep 22 18:32:39 2016] [error] [client 192.168.8.53] PHP Fatal error:
> Call to undefined function mcrypt_module_open() in
> /var/simplesamlphp/vendor/robrichards/xmlseclibs/src/XMLSecurityKey.php on

Your deployment seems to be missing the MCrypt module for PHP.
But of course the SimpleSAMLphp admin web UI would have shown you
that.
-peter