OpenSAML V3: Problems while marshaling encrypted assertion

[Brent Putman]

On 4/26/17 12:47 PM, Locatelli da Silva, Thiago wrote:
> By any chance, does anyone know what I am doing wrong?
>
> http://stackoverflow.com/questions/43636869/error-exception-while-marshalling-signed-and-encrypted-response-opensaml-v3
>

I can't see anything obviously wrong with what you are doing.  I
suspect that the issue might lie with what you are doing *before* the
code you posted there, such as when/how you are encrypting the
Assertion and then adding the EncryptedAssertion to the Response; how
those XMLObjects are all being constructed, and so on.

I can state with certainty that it does in general work, as we do this
very thing in the Shibboleth IdP.  In case it's helpful, here is the
OpenSAML profile action component which encrypts Assertions and adds
them to the Response, which is used in the IdP for this purpose:

https://git.shibboleth.net/view/?p=java-opensaml.git;a=blob;f=opensaml-saml-impl/src/main/java/org/opensaml/saml/saml2/profile/impl/EncryptAssertions.java;hb=HEAD

It's possible you've got something in the wrong order?  Or possibly
you've hit some unknown bug in the OpenSAML code.  It might also be an
issue with the XML DOM/JAXP impl you're using.  What Java
platform/vendor/version are you on? Have you done anything special
around DOM processing config, like endorse a custom Xerces or anything
like that?  Or are you just using the JAXP impl that is internal to
your JRE?
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/dev/attachments/20170426/5dc6d799/attachment.html>