Help with assertion encryption ?

[Brent Putman]

On 5/20/14 12:35 AM, Tom Zeller wrote:
> I'm working on idp-distribution, and the encrypt assertions action
> throws an exception, with Java 7 "Cannot find any provider supporting
> AES/GCM/NoPadding"


That's odd... What are you doing/invoking/running when you see this? 
AFAIK, we shouldn't be configured to use AES GCM anywhere by default. 
Is there some relying party config that you are setting for this?

I only see conf/relying-party-native.xml in idp-conf that 's doing
anything with encryption config, and that's configured to use the
non-GCM AES.


Maybe you have some metadata with a KeyDescriptor/EncryptionMethod? 
That's the only thing I can think of... although if you update to the
code I just checked in earlier this evening for OSJ-77, even that
shouldn't cause this anymore.

> I think I need to use BC, but not sure how.

That might work, but I don't think that's what you want.  Since AES GCM
isn't supported without either Java 8 or BC, I suspect you want to
configure to use non-GCM AES.