Metadata Aggregator - Issues with XMLSignatureSigningStage

[Brent Putman]

On 11/2/11 11:46 AM, Chad La Joie wrote:
> Okay, I wasn't able to find  the list of what algos are actually
> supported (I can never find those lists, Brent probably knows where
> they are).
>

Well, the "regular" (i.e non JSR 105) Santuario config file, where they
have all of the algorithm mapping stuff, is here:

org/apache/xml/security/resource/config.xml

However, looking at revisions in svn that file has had the rsa-sha256
support since at least 2002, so that's not the problem.

I looked at the JSR 105 classes, the factory class below referenced in
the error actually hardcodes the supported algorithm URI -> class impl
mappings, and it's the thing throwing the NoSuchAlgorithmException below:

org.jcp.xml.dsig.internal.dom.DOMXMLSignatureFactory.newSignatureMethod


It didn't add the rsa-sha256 support until 4/11/08 according to svn.  So
must have been one of the earlier versions of xmlsec that made it into
Oracle Java 6.




>>> 2011-11-02 10:52:30,398 - ERROR [net.shibboleth.metadata.dom.XMLSignatureSigningStage:644] - Unable to create signature method http://www.w3.org/2001/04/xmldsig-more#rsa-sha256
>>> java.security.NoSuchAlgorithmException: unsupported algorithm
>>>        at org.jcp.xml.dsig.internal.dom.DOMXMLSignatureFactory.newSignatureMethod(Unknown Source) ~[na:1.6.0_16]
>>>        at net.shibboleth.metadata.dom.XMLSignatureSigningStage.buildSignedInfo(XMLSignatureSigningStage.java:641) [aggregator-pipeline-0.6.1.jar:na]
>