<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0">
<base href="https://issues.shibboleth.net/jira">
<title>Message Title</title>
</head>
<body class="jira" style="color: #333333; font-family: Arial, sans-serif; font-size: 14px; line-height: 1.429">
<table id="background-table" cellpadding="0" cellspacing="0" width="100%" style="border-collapse: collapse; mso-table-lspace: 0pt; mso-table-rspace: 0pt; background-color: #f5f5f5; border-collapse: collapse; mso-table-lspace: 0pt; mso-table-rspace: 0pt" bgcolor="#f5f5f5">
<!-- header here -->
<tbody>
<tr>
<td id="header-pattern-container" style="padding: 0px; border-collapse: collapse; padding: 10px 20px">
<table id="header-pattern" cellspacing="0" cellpadding="0" border="0" style="border-collapse: collapse; mso-table-lspace: 0pt; mso-table-rspace: 0pt">
<tbody>
<tr>
<td id="header-avatar-image-container" valign="top" style="padding: 0px; border-collapse: collapse; vertical-align: top; width: 32px; padding-right: 8px" width="32"> <img id="header-avatar-image" class="image_fix" src="cid:jira-generated-image-avatar-1266b43d-dcb6-4db6-ae88-d13b28e71000" height="32" width="32" border="0" style="border-radius: 3px; vertical-align: top"> </td>
<td id="header-text-container" valign="middle" style="padding: 0px; border-collapse: collapse; vertical-align: middle; font-family: Arial, sans-serif; font-size: 14px; line-height: 20px; mso-line-height-rule: exactly; mso-text-raise: 1px"> <a class="user-hover" rel="20089374@marist.edu" id="email_20089374@marist.edu" href="https://issues.shibboleth.net/jira/secure/ViewProfile.jspa?name=20089374%40marist.edu" style="color:#0052cc;; color: #3b73af; text-decoration: none">20089374@marist.edu</a> <strong>commented</strong> on <a href="https://issues.shibboleth.net/jira/browse/IDP-1522" style="color: #3b73af; text-decoration: none"><img src="cid:jira-generated-image-avatar-26dd7ca5-f79c-44f2-bb20-e47adffc5852" height="16" width="16" border="0" align="absmiddle" alt="New Feature"> IDP-1522</a> </td>
</tr>
</tbody>
</table> </td>
</tr>
<tr>
<td id="email-content-container" style="padding: 0px; border-collapse: collapse; padding: 0 20px">
<table id="email-content-table" cellspacing="0" cellpadding="0" border="0" width="100%" style="border-collapse: collapse; mso-table-lspace: 0pt; mso-table-rspace: 0pt; border-spacing: 0; border-collapse: separate">
<tbody>
<tr>
<!-- there needs to be content in the cell for it to render in some clients -->
<td class="email-content-rounded-top mobile-expand" style="padding: 0px; border-collapse: collapse; color: #ffffff; padding: 0 15px 0 16px; height: 15px; background-color: #ffffff; border-left: 1px solid #cccccc; border-top: 1px solid #cccccc; border-right: 1px solid #cccccc; border-bottom: 0; border-top-right-radius: 5px; border-top-left-radius: 5px; height: 10px; line-height: 10px; padding: 0 15px 0 16px; mso-line-height-rule: exactly" height="10" bgcolor="#ffffff"> </td>
</tr>
<tr>
<td class="email-content-main mobile-expand " style="padding: 0px; border-collapse: collapse; border-left: 1px solid #cccccc; border-right: 1px solid #cccccc; border-top: 0; border-bottom: 0; padding: 0 15px 0 16px; background-color: #ffffff" bgcolor="#ffffff">
<table class="page-title-pattern" cellspacing="0" cellpadding="0" border="0" width="100%" style="border-collapse: collapse; mso-table-lspace: 0pt; mso-table-rspace: 0pt">
<tbody>
<tr>
<td style="vertical-align: top;; padding: 0px; border-collapse: collapse; padding-right: 5px; font-size: 20px; line-height: 30px; mso-line-height-rule: exactly" class="page-title-pattern-header-container"> <span class="page-title-pattern-header" style="font-family: Arial, sans-serif; padding: 0; font-size: 20px; line-height: 30px; mso-text-raise: 2px; mso-line-height-rule: exactly; vertical-align: middle"> <a href="https://issues.shibboleth.net/jira/browse/IDP-1522" style="color: #3b73af; text-decoration: none">Re: Support for encrypted attributes in the resolver</a> </span> </td>
</tr>
</tbody>
</table> </td>
</tr>
<tr>
<td id="text-paragraph-pattern-top" class="email-content-main mobile-expand comment-top-pattern" style="padding: 0px; border-collapse: collapse; border-left: 1px solid #cccccc; border-right: 1px solid #cccccc; border-top: 0; border-bottom: 0; padding: 0 15px 0 16px; background-color: #ffffff; border-bottom: none; padding-bottom: 0" bgcolor="#ffffff">
<table class="text-paragraph-pattern" cellspacing="0" cellpadding="0" border="0" width="100%" style="border-collapse: collapse; mso-table-lspace: 0pt; mso-table-rspace: 0pt; font-family: Arial, sans-serif; font-size: 14px; line-height: 20px; mso-line-height-rule: exactly; mso-text-raise: 2px">
<tbody>
<tr>
<td class="text-paragraph-pattern-container mobile-resize-text " style="padding: 0px; border-collapse: collapse; padding: 0 0 10px 0"> <p style="margin: 10px 0 0 0; margin-top: 0">I think I have it working the way you meant:<br> There's a bean with the DataSealer defined (in the test cases, I've added it to 'externalbeans.xml'). I also needed to add the StringToResrourceConverter to the list of converters:</p> <p style="margin: 10px 0 0 0"> </p>
<div class="code panel" style="border-width: 1px;; border: 1px solid #cccccc; background: #f5f5f5; font-size: 12px; line-height: 1.333; font-family: monospace; border: 1px solid #cccccc; -moz-border-radius: 3px 3px 3px 3px; border-radius: 3px 3px 3px 3px; margin: 9px 0">
<div class="codeContent panelContent" style="padding: 9px 12px">
<pre class="code-java" style="margin: 10px 0 0 0; margin-top: 0; max-height: 30em; overflow: auto; white-space: pre-wrap; word-wrap: normal">
<bean id=<span class="code-quote" style="color: #009100">"encryptedAttribute.DataSealer"</span> class=<span class="code-quote" style="color: #009100">"net.shibboleth.utilities.java.support.security.DataSealer"</span>>
<property name=<span class="code-quote" style="color: #009100">"keyStrategy"</span>>
<bean class=<span class="code-quote" style="color: #009100">"net.shibboleth.utilities.java.support.security.impl.BasicKeystoreKeyStrategy"</span>
p:keystoreResource=<span class="code-quote" style="color: #009100">"/net/shibboleth/idp/attribute/resolver/spring/ad/EncryptionKeyStore.p12"</span>
p:keyVersionResource=<span class="code-quote" style="color: #009100">"/net/shibboleth/idp/attribute/resolver/spring/ad/SealerKeyStore.kver"</span>
p:keystorePassword=<span class="code-quote" style="color: #009100">"kpassword"</span>
p:keyPassword=<span class="code-quote" style="color: #009100">"kpassword"</span>
p:keystoreType=<span class="code-quote" style="color: #009100">"pkcs12"</span>
p:updateInterval=<span class="code-quote" style="color: #009100">"PT0S"</span> />
</property>
</bean>
</pre>
</div>
</div> <p style="margin: 10px 0 0 0">That bean is referenced in the AttributeDescription:</p> <p style="margin: 10px 0 0 0"> </p>
<div class="code panel" style="border-width: 1px;; border: 1px solid #cccccc; background: #f5f5f5; font-size: 12px; line-height: 1.333; font-family: monospace; border: 1px solid #cccccc; -moz-border-radius: 3px 3px 3px 3px; border-radius: 3px 3px 3px 3px; margin: 9px 0">
<div class="codeContent panelContent" style="padding: 9px 12px">
<pre class="code-java" style="margin: 10px 0 0 0; margin-top: 0; max-height: 30em; overflow: auto; white-space: pre-wrap; word-wrap: normal">
<AttributeDefinition xsi:type=<span class="code-quote" style="color: #009100">"Decrypted"</span> id=<span class="code-quote" style="color: #009100">"decryptedOne"</span> dataSealerRef=<span class="code-quote" style="color: #009100">"encryptedAttribute.DataSealer"</span>>
<InputDataConnector ref=<span class="code-quote" style="color: #009100">"staticEncrypted"</span> attributeNames=<span class="code-quote" style="color: #009100">"encryptedOne"</span>/
</AttributeDefinition>
<AttributeDefinition xsi:type=<span class="code-quote" style="color: #009100">"Decrypted"</span> id=<span class="code-quote" style="color: #009100">"decryptedTwo"</span> dataSealerRef=<span class="code-quote" style="color: #009100">"encryptedAttribute.DataSealer"</span>>
<InputDataConnector ref=<span class="code-quote" style="color: #009100">"staticEncrypted"</span> attributeNames=<span class="code-quote" style="color: #009100">"encryptedTwo"</span>/>
</AttributeDefinition>
</pre>
</div>
</div> <p style="margin: 10px 0 0 0"> </p> <p style="margin: 10px 0 0 0">The parser is calling builder.addPropertyReference:</p> <p style="margin: 10px 0 0 0"> </p>
<div class="code panel" style="border-width: 1px;; border: 1px solid #cccccc; background: #f5f5f5; font-size: 12px; line-height: 1.333; font-family: monospace; border: 1px solid #cccccc; -moz-border-radius: 3px 3px 3px 3px; border-radius: 3px 3px 3px 3px; margin: 9px 0">
<div class="codeContent panelContent" style="padding: 9px 12px">
<pre class="code-java" style="margin: 10px 0 0 0; margin-top: 0; max-height: 30em; overflow: auto; white-space: pre-wrap; word-wrap: normal">
<span class="code-keyword" style="color: #000091">final</span> <span class="code-object" style="color: #910091">String</span> dataSealer = StringSupport.trimOrNull(config.getAttributeNS(<span class="code-keyword" style="color: #000091">null</span>, <span class="code-quote" style="color: #009100">"dataSealerRef"</span>));
<span class="code-keyword" style="color: #000091">if</span>(dataSealer != <span class="code-keyword" style="color: #000091">null</span>){
log.debug(<span class="code-quote" style="color: #009100">"{} Setting DataSealer to <span class="code-quote" style="color: #009100">'{}'</span>."</span>, getLogPrefix(), dataSealer);
builder.addPropertyReference(<span class="code-quote" style="color: #009100">"sealer"</span>, dataSealer);
}</pre>
</div>
</div> <p style="margin: 10px 0 0 0"> </p> <p style="margin: 10px 0 0 0"> </p> <p style="margin: 10px 0 0 0"> </p>
<div class="code panel" style="border-width: 1px;; border: 1px solid #cccccc; background: #f5f5f5; font-size: 12px; line-height: 1.333; font-family: monospace; border: 1px solid #cccccc; -moz-border-radius: 3px 3px 3px 3px; border-radius: 3px 3px 3px 3px; margin: 9px 0">
<div class="codeContent panelContent" style="padding: 9px 12px">
<pre class="code-java" style="margin: 10px 0 0 0; margin-top: 0; max-height: 30em; overflow: auto; white-space: pre-wrap; word-wrap: normal">
DEBUG [net.shibboleth.idp.attribute.resolver.spring.ad.impl.DecryptedAttributeDefinitionParser:59] - Attribute Definition <span class="code-quote" style="color: #009100">'decryptedOne'</span>: Setting DataSealer to <span class="code-quote" style="color: #009100">'encryptedAttribute.DataSealer'</span>.
DEBUG [net.shibboleth.idp.attribute.resolver.spring.ad.impl.DecryptedAttributeDefinitionParser:59] - Attribute Definition <span class="code-quote" style="color: #009100">'decryptedTwo'</span>: Setting DataSealer to <span class="code-quote" style="color: #009100">'encryptedAttribute.DataSealer'</span>.
DEBUG [net.shibboleth.idp.attribute.resolver.ad.impl.DecryptedAttributeDefinition:92] - Attribute Definition <span class="code-quote" style="color: #009100">'decryptedTwo'</span>: Encrypted Attribute Value: AANrZXnZY6djg+8Rnq4YBfgrJin85ddkI9UESmrm/sdJJHalGsRtZliv9ql2Z2ZfWApro5bw/19gtdnw5hImfcxRMq+u6itQJER7tg0jWB3QRe4=
DEBUG [net.shibboleth.idp.attribute.resolver.ad.impl.DecryptedAttributeDefinition:97] - Attribute Definition <span class="code-quote" style="color: #009100">'decryptedTwo'</span>:: Adding decypted string attribute to collection: KYQCZKQMJLWQUGSO
DEBUG [net.shibboleth.idp.attribute.resolver.ad.impl.DecryptedAttributeDefinition:92] - Attribute Definition <span class="code-quote" style="color: #009100">'decryptedTwo'</span>: Encrypted Attribute Value: AANrZXkJSpOo8wlvL+DiBhhEnfI8MDq1mYj+p674fhyiMQr7LkCzq1ckXryKQVfX6ei5X9O7n1QecpfSXMgX5c7mU4ftl0ovmj/vwSXIhKmwFvw=
DEBUG [net.shibboleth.idp.attribute.resolver.ad.impl.DecryptedAttributeDefinition:97] - Attribute Definition <span class="code-quote" style="color: #009100">'decryptedTwo'</span>:: Adding decypted string attribute to collection: TZQMFYJTLWPPDLVT
DEBUG [net.shibboleth.idp.attribute.resolver.ad.impl.DecryptedAttributeDefinition:92] - Attribute Definition <span class="code-quote" style="color: #009100">'decryptedOne'</span>: Encrypted Attribute Value: AANrZXnPi0tBgSK6Vxj4tona1g7+oylpeByveMa6XFdZiFWmcnDkDNwEsQZKWeOmIJErmpyvNqUVCFv8fUvd1fOaUtNayKw49nCxrfW4gU2zI2A=
DEBUG [net.shibboleth.idp.attribute.resolver.ad.impl.DecryptedAttributeDefinition:97] - Attribute Definition <span class="code-quote" style="color: #009100">'decryptedOne'</span>:: Adding decypted string attribute to collection: FSQLHDXWHNXERUOK
DEBUG [net.shibboleth.idp.attribute.resolver.spring.ad.impl.DecryptedAttributeDefinitionParser:59] - Attribute Definition <span class="code-quote" style="color: #009100">'decryptedOne'</span>: Setting DataSealer to <span class="code-quote" style="color: #009100">'encryptedAttribute.DataSealer'</span>.
DEBUG [net.shibboleth.idp.attribute.resolver.spring.ad.impl.DecryptedAttributeDefinitionParser:59] - Attribute Definition <span class="code-quote" style="color: #009100">'decryptedTwo'</span>: Setting DataSealer to <span class="code-quote" style="color: #009100">'encryptedAttribute.DataSealer'</span>.
DEBUG [net.shibboleth.idp.attribute.resolver.ad.impl.DecryptedAttributeDefinition:92] - Attribute Definition <span class="code-quote" style="color: #009100">'decryptedTwo'</span>: Encrypted Attribute Value: AANrZXnZY6djg+8Rnq4YBfgrJin85ddkI9UESmrm/sdJJHalGsRtZliv9ql2Z2ZfWApro5bw/19gtdnw5hImfcxRMq+u6itQJER7tg0jWB3QRe4=
DEBUG [net.shibboleth.idp.attribute.resolver.ad.impl.DecryptedAttributeDefinition:97] - Attribute Definition <span class="code-quote" style="color: #009100">'decryptedTwo'</span>:: Adding decypted string attribute to collection: KYQCZKQMJLWQUGSO
DEBUG [net.shibboleth.idp.attribute.resolver.ad.impl.DecryptedAttributeDefinition:92] - Attribute Definition <span class="code-quote" style="color: #009100">'decryptedTwo'</span>: Encrypted Attribute Value: AANrZXkJSpOo8wlvL+DiBhhEnfI8MDq1mYj+p674fhyiMQr7LkCzq1ckXryKQVfX6ei5X9O7n1QecpfSXMgX5c7mU4ftl0ovmj/vwSXIhKmwFvw=
DEBUG [net.shibboleth.idp.attribute.resolver.ad.impl.DecryptedAttributeDefinition:97] - Attribute Definition <span class="code-quote" style="color: #009100">'decryptedTwo'</span>:: Adding decypted string attribute to collection: TZQMFYJTLWPPDLVT
DEBUG [net.shibboleth.idp.attribute.resolver.ad.impl.DecryptedAttributeDefinition:92] - Attribute Definition <span class="code-quote" style="color: #009100">'decryptedOne'</span>: Encrypted Attribute Value: AANrZXnPi0tBgSK6Vxj4tona1g7+oylpeByveMa6XFdZiFWmcnDkDNwEsQZKWeOmIJErmpyvNqUVCFv8fUvd1fOaUtNayKw49nCxrfW4gU2zI2A=
DEBUG [net.shibboleth.idp.attribute.resolver.ad.impl.DecryptedAttributeDefinition:97] - Attribute Definition <span class="code-quote" style="color: #009100">'decryptedOne'</span>:: Adding decypted string attribute to collection: FSQLHDXWHNXERUOK</pre>
</div>
</div> <p style="margin: 10px 0 0 0"> </p> </td>
</tr>
</tbody>
</table> </td>
</tr>
<tr>
<td class="email-content-main mobile-expand " style="padding: 0px; border-collapse: collapse; border-left: 1px solid #cccccc; border-right: 1px solid #cccccc; border-top: 0; border-bottom: 0; padding: 0 15px 0 16px; background-color: #ffffff" bgcolor="#ffffff">
<table id="actions-pattern" cellspacing="0" cellpadding="0" border="0" width="100%" style="border-collapse: collapse; mso-table-lspace: 0pt; mso-table-rspace: 0pt; font-family: Arial, sans-serif; font-size: 14px; line-height: 20px; mso-line-height-rule: exactly; mso-text-raise: 1px">
<tbody>
<tr>
<td id="actions-pattern-container" valign="middle" style="padding: 0px; border-collapse: collapse; padding: 10px 0 10px 24px; vertical-align: middle; padding-left: 0">
<table align="left" style="border-collapse: collapse; mso-table-lspace: 0pt; mso-table-rspace: 0pt">
<tbody>
<tr>
<td class="actions-pattern-action-icon-container" style="padding: 0px; border-collapse: collapse; font-family: Arial, sans-serif; font-size: 14px; line-height: 20px; mso-line-height-rule: exactly; mso-text-raise: 0; vertical-align: middle"> <a href="https://issues.shibboleth.net/jira/browse/IDP-1522#add-comment" target="_blank" title="Add Comment" style="color: #3b73af; text-decoration: none"> <img class="actions-pattern-action-icon-image" src="cid:jira-generated-image-static-comment-icon-b186cb3b-29dc-4c3f-a9f6-404f1f8f29b1" alt="Add Comment" title="Add Comment" height="16" width="16" border="0" style="vertical-align: middle"> </a> </td>
<td class="actions-pattern-action-text-container" style="padding: 0px; border-collapse: collapse; font-family: Arial, sans-serif; font-size: 14px; line-height: 20px; mso-line-height-rule: exactly; mso-text-raise: 4px; padding-left: 5px"> <a href="https://issues.shibboleth.net/jira/browse/IDP-1522#add-comment" target="_blank" title="Add Comment" style="color: #3b73af; text-decoration: none">Add Comment</a> </td>
</tr>
</tbody>
</table> </td>
</tr>
</tbody>
</table> </td>
</tr>
<!-- there needs to be content in the cell for it to render in some clients -->
<tr>
<td class="email-content-rounded-bottom mobile-expand" style="padding: 0px; border-collapse: collapse; color: #ffffff; padding: 0 15px 0 16px; height: 5px; line-height: 5px; background-color: #ffffff; border-top: 0; border-left: 1px solid #cccccc; border-bottom: 1px solid #cccccc; border-right: 1px solid #cccccc; border-bottom-right-radius: 5px; border-bottom-left-radius: 5px; mso-line-height-rule: exactly" height="5" bgcolor="#ffffff"> </td>
</tr>
</tbody>
</table> </td>
</tr>
<tr>
<td id="footer-pattern" style="padding: 0px; border-collapse: collapse; padding: 12px 20px">
<table id="footer-pattern-container" cellspacing="0" cellpadding="0" border="0" style="border-collapse: collapse; mso-table-lspace: 0pt; mso-table-rspace: 0pt">
<tbody>
<tr>
<td id="footer-pattern-text" class="mobile-resize-text" width="100%" style="padding: 0px; border-collapse: collapse; color: #999999; font-size: 12px; line-height: 18px; font-family: Arial, sans-serif; mso-line-height-rule: exactly; mso-text-raise: 2px"> This message was sent by Atlassian Jira <span id="footer-build-information">(v8.5.1#805001-<span title="c5b54a7317f297e17ddad5bb52a1850cf2bdb4bc" data-commit-id="c5b54a7317f297e17ddad5bb52a1850cf2bdb4bc}">sha1:c5b54a7</span>)</span> </td>
<td id="footer-pattern-logo-desktop-container" valign="top" style="padding: 0px; border-collapse: collapse; padding-left: 20px; vertical-align: top">
<table style="border-collapse: collapse; mso-table-lspace: 0pt; mso-table-rspace: 0pt">
<tbody>
<tr>
<td id="footer-pattern-logo-desktop-padding" style="padding: 0px; border-collapse: collapse; padding-top: 3px"> <img id="footer-pattern-logo-desktop" src="https://issues.shibboleth.net/jira/images/mail/atlassian-email-logo.png" alt="Atlassian logo" title="Atlassian logo" width="191" height="24" class="image_fix"> </td>
</tr>
</tbody>
</table> </td>
</tr>
</tbody>
</table> </td>
</tr>
</tbody>
</table>
</body>
</html>