Question about Bouncy Castle and JCE

[John Shimek]

Hi,

I am working on using OpenSAML to allow our product to authenticate via an IdP. The documentation[1] recommends using Bouncy Castle as the JCE provider. We are reluctant to do so because are already make extensive use of the default JCE included with JDK 6 and the extended amount of testing it will require to use BC as the JCE provider. Is there clear documentation on when OpenSAML will thrown an unsupported algorithm exception due to not using BC? I am thinking it would be when getting an auth response that was signed with a crypto algorithm not supported by the default JCE. Is that the case?

Thank you,John Shimek
[1] https://wiki.shibboleth.net/confluence/display/OpenSAML/OSTwoUsrManJavaInstall
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/dev/attachments/20120725/4f743568/attachment.html