{"record":{"id":"3ff7f9a41ae09b24","repo":"RocketChat/Rocket.Chat","slug":"missing-certificate-while-generating-metadata-for","errorCode":null,"errorMessage":"Missing certificate while generating metadata for decrypting service provider","messagePattern":"Missing certificate while generating metadata for decrypting service provider","errorType":"exception","errorClass":"Error","httpStatus":null,"severity":"error","filePath":"apps/meteor/server/lib/saml/lib/generators/ServiceProviderMetadata.ts","lineNumber":25,"sourceCode":"\n/*\n\tThe metadata will be available at the following url:\n\t[rocketchat-url]/_saml/metadata/[provider-name]\n*/\n\nexport class ServiceProviderMetadata {\n\tpublic static generate(serviceProviderOptions: IServiceProviderOptions): string {\n\t\tconst data = this.getData(serviceProviderOptions);\n\t\treturn SAMLUtils.fillTemplateData(this.metadataTemplate(serviceProviderOptions), data);\n\t}\n\n\tprivate static certificateTagTemplate(serviceProviderOptions: IServiceProviderOptions): string {\n\t\tif (!serviceProviderOptions.privateKey) {\n\t\t\treturn '';\n\t\t}\n\n\t\tif (!serviceProviderOptions.privateCert) {\n\t\t\tthrow new Error('Missing certificate while generating metadata for decrypting service provider');\n\t\t}\n\n\t\treturn serviceProviderOptions.metadataCertificateTemplate || defaultMetadataCertificateTemplate;\n\t}\n\n\tprivate static metadataTemplate(serviceProviderOptions: IServiceProviderOptions): string {\n\t\tconst data = {\n\t\t\tcertificateTag: this.certificateTagTemplate(serviceProviderOptions),\n\t\t};\n\n\t\tconst template = serviceProviderOptions.metadataTemplate || defaultMetadataTemplate;\n\t\treturn SAMLUtils.fillTemplateData(template, data);\n\t}\n\n\tprivate static getData(serviceProviderOptions: IServiceProviderOptions): IMetadataVariables {\n\t\tif (!serviceProviderOptions.callbackUrl) {\n\t\t\tthrow new Error('Unable to generate service provider metadata when callbackUrl option is not set');\n\t\t}","sourceCodeStart":7,"sourceCodeEnd":43,"githubUrl":"https://github.com/RocketChat/Rocket.Chat/blob/b2c16d5842cbe6b69b59bdf6fc5e5f1afcd1f0b0/apps/meteor/server/lib/saml/lib/generators/ServiceProviderMetadata.ts#L7-L43","documentation":"Error \"Missing certificate while generating metadata for decrypting service provider\" thrown in RocketChat/Rocket.Chat.","triggerScenarios":"Thrown when generating service provider metadata with decryption enabled but no private key/certificate configured.","commonSituations":"See trigger scenarios.","solutions":["Upload/configure the decryption certificate (and private key) in the SAML service provider settings before generating metadata."],"exampleFix":null,"handlingStrategy":null,"validationCode":null,"typeGuard":null,"tryCatchPattern":null,"preventionTips":[],"tags":[],"backgroundTag":null,"analyzedSha":"b2c16d5842cbe6b69b59bdf6fc5e5f1afcd1f0b0","analyzedAt":"2026-08-18T15:26:39.429Z","contentChangedAt":"2026-08-18T15:26:39.429Z","schemaVersion":2},"datasetVersion":"2026-09-14T00:17:10.932Z"}