Missing Metadata -> Encryption Key Errors

[Cantor, Scott]

On 10/20/15, 12:07 AM, "dev on behalf of Brent Putman" <dev-bounces at shibboleth.net on behalf of putmanb at georgetown.edu> wrote:



>On 10/19/15 11:03 PM, Cantor, Scott wrote:
>>
>> I can't verify it at the moment, there's a bug in the delegation code Brent added and it's not running to completion at the moment for an unverified request.
>
>I think if you just comment out that action in the flows, it should get
>past it for the moment.  The other decorate action that was added
>should just be a no-op if there's no delegation context created by the
>PopulateDelegationContext.

Yes, it worked.

The log warnings are what I expected:

2015-10-20 00:11:02,780 - WARN [org.opensaml.xmlsec.impl.BasicEncryptionParametersResolver:221] - Validation failure: Failed to resolve both a data and a key encryption credential
2015-10-20 00:11:02,781 - DEBUG [net.shibboleth.idp.saml.saml2.profile.impl.PopulateEncryptionParameters:330] - Profile Action PopulateEncryptionParameters: Failed to resolve EncryptionParameters
2015-10-20 00:11:02,781 - WARN [net.shibboleth.idp.saml.saml2.profile.impl.PopulateEncryptionParameters:343] - Profile Action PopulateEncryptionParameters: Resolver returned no EncryptionParameters
2015-10-20 00:11:02,794 - WARN [org.opensaml.profile.action.impl.LogEvent:76] - An error event occurred while processing the request: InvalidSecurityConfiguration

You would have to both deliberately turn on SSO for unverified RPs and break the example it shows to do that by turning encryption back on.

-- Scott