Help with assertion encryption ?

[Brent Putman]

On 5/20/14 1:33 PM, Tom Zeller wrote:
>
> I was using vanilla configs, for which
> idp-conf/src/main/resources/conf/logback.xml has for OpenSAML :
>
> <logger name="org.opensaml" level="WARN" />
> <logger name="org.opensaml.saml.common.binding" level="DEBUG" />
> <logger name="org.opensaml.saml.saml1.binding" level="DEBUG" />
> <logger name="org.opensaml.saml.common.profile" level="DEBUG" />
> <logger name="org.opensaml.saml.saml1.profile" level="DEBUG" />
> <logger name="org.opensaml.saml.saml2.binding" level="DEBUG" />
> <logger name="org.opensaml.saml.saml2.profile" level="DEBUG" />
> <logger name="org.opensaml.storage" level="TRACE" />
> <logger name="org.opensaml.xmlsec" level="DEBUG" />
> <logger name="PROTOCOL_MESSAGE" level="DEBUG" />
> <root level="warn">


Ah, ok, I didn't know we had that.  I was looking for some DEBUG from:

org.opensaml.saml.security.impl.SAMLMetadataEncryptionParametersResolver

which clearly isn't covered by the above, so that explains why I wasn't
seeing anything.  So that mystery is solved as well.


> Also, I attached the test SP's metadata to my home page on the wiki.

Yep, that looks like what we ideally would want to see in the wild in
the future, and at the same time have it work for IdP signing and
encrypting environments that don't support some of the new/stronger
algorithms, etc.