Help with assertion encryption ?
Tom Zeller
tzeller at dragonacea.biz
Tue May 20 12:47:04 EDT 2014
>> I'm working on idp-distribution, and the encrypt assertions action
>> throws an exception, with Java 7 "Cannot find any provider supporting
>> AES/GCM/NoPadding"
>
>
> That's odd... What are you doing/invoking/running when you see this?
> AFAIK, we shouldn't be configured to use AES GCM anywhere by default.
> Is there some relying party config that you are setting for this?
I was building the default idp-distribution with vanilla
configuration, but it got messy and I probably got dependencies mixed
up somewhere.
> I only see conf/relying-party-native.xml in idp-conf that 's doing
> anything with encryption config, and that's configured to use the
> non-GCM AES.
>
>
> Maybe you have some metadata with a KeyDescriptor/EncryptionMethod?
> That's the only thing I can think of... although if you update to the
> code I just checked in earlier this evening for OSJ-77, even that
> shouldn't cause this anymore.
I did see the OpenSAML update, applied it, good to go, so far.
More information about the dev
mailing list