Question about Bouncy Castle and JCE

[Chad La Joie]

Check the SAML spec for the places where the IdP can sign/encrypt
things.  Any such place is where you'll get that exception if the IdP
uses something not supported by the default JCE.

On Wed, Jul 25, 2012 at 12:55 PM, John Shimek <jshimek at code42.com> wrote:
> Hi,
>
> I am working on using OpenSAML to allow our product to authenticate via an
> IdP. The documentation[1] recommends using Bouncy Castle as the JCE
> provider. We are reluctant to do so because are already make extensive use
> of the default JCE included with JDK 6 and the extended amount of testing it
> will require to use BC as the JCE provider. Is there clear documentation on
> when OpenSAML will thrown an unsupported algorithm exception due to not
> using BC? I am thinking it would be when getting an auth response that was
> signed with a crypto algorithm not supported by the default JCE. Is that the
> case?
>
> Thank you,
> John Shimek
>
> [1]
> https://wiki.shibboleth.net/confluence/display/OpenSAML/OSTwoUsrManJavaInstall
>
> --
> To unsubscribe from this list send an email to
> dev-unsubscribe at shibboleth.net



-- 
Chad La Joie
www.itumi.biz
trusted identities, delivered