OpenSAML Encryption

[Cantor, Scott]

On 11/21/18, 5:00 AM, "dev on behalf of Martin Doležal" <dev-bounces at shibboleth.net on behalf of martin.dolezal at noctuint.cz> wrote:

> I can sign my messages, I can validate signature from IdP, I can
> decrypt the encrypted messages from IdP (found and modified some
> samples for each of these cases using xmltooling::CredentialResolver,
> xmlsignature::SignatureValidator, xmltooling::CredentialResolver and
> things like that)

That's very impressive, if true, but you're at serious risk here if you did anything wrong. Please just use an existing SP implementation.

>  but I have no idea how to encrypt my requests, such as AuthnRequest.

There is nothing to encrypt.

> I have Stefan Rasmusson’s book where it is described how to do it in Java

I seriously doubt that unless you're talking about encrypting a NameID in an AuthnRequest, and that's an unusual and unnecessary use case.

-- Scott