Help with assertion encryption ?

Tom Zeller tzeller at dragonacea.biz
Tue May 20 12:47:04 EDT 2014


>> I'm working on idp-distribution, and the encrypt assertions action
>> throws an exception, with Java 7 "Cannot find any provider supporting
>> AES/GCM/NoPadding"
>
>
> That's odd... What are you doing/invoking/running when you see this?
> AFAIK, we shouldn't be configured to use AES GCM anywhere by default.
> Is there some relying party config that you are setting for this?

I was building the default idp-distribution with vanilla
configuration, but it got messy and I probably got dependencies mixed
up somewhere.

> I only see conf/relying-party-native.xml in idp-conf that 's doing
> anything with encryption config, and that's configured to use the
> non-GCM AES.
>
>
> Maybe you have some metadata with a KeyDescriptor/EncryptionMethod?
> That's the only thing I can think of... although if you update to the
> code I just checked in earlier this evening for OSJ-77, even that
> shouldn't cause this anymore.

I did see the OpenSAML update, applied it, good to go, so far.


More information about the dev mailing list