<html>
<head>
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<br>
<div class="moz-cite-prefix">On 5/20/14 12:57 PM, Tom Zeller wrote:<br>
</div>
<blockquote
cite="mid:CAMNmQDThSsLRHfDhsuFsh3FUdF-AtCYO4zswyzi9bA+5cZvEDg@mail.gmail.com"
type="cite">
<blockquote type="cite">
<pre wrap="">The full stacktrace might be useful, just to tell us where/how it's
happening.
</pre>
</blockquote>
<pre wrap="">
Okay, I attached the log file to my home page on the wiki as
"2014-05-20-tom-weird-stack-trace.txt".</pre>
</blockquote>
<br>
Yeah, I'm 99.99% sure you either have:<br>
<br>
1) SP metadata with a KeyDescriptor/EncryptionMethod that indicates
these algorithms.<br>
2) Explict EncryptionConfiguration somewhere that specifies these<br>
<br>
This is what the logs shows as being resolved. Note it's also
getting RSA OAEP 1.1:<br>
<br>
<tt>2014-05-19 23:16:05.107 [DEBUG] :
org.opensaml.xmlsec.impl.BasicEncryptionParametersResolver:
Resolved EncryptionParameters:</tt><tt><br>
</tt><tt>2014-05-19 23:16:05.107 [DEBUG] :
org.opensaml.xmlsec.impl.BasicEncryptionParametersResolver:
Key transport credential with key algorithm: RSA</tt><tt><br>
</tt><tt>2014-05-19 23:16:05.107 [DEBUG] :
org.opensaml.xmlsec.impl.BasicEncryptionParametersResolver:
Key transport algorithm URI:
<a class="moz-txt-link-freetext" href="http://www.w3.org/2009/xmlenc11#rsa-oaep">http://www.w3.org/2009/xmlenc11#rsa-oaep</a></tt><tt><br>
</tt><tt>2014-05-19 23:16:05.107 [DEBUG] :
org.opensaml.xmlsec.impl.BasicEncryptionParametersResolver:
Key transport KeyInfoGenerator: present</tt><tt><br>
</tt><tt>2014-05-19 23:16:05.107 [DEBUG] :
org.opensaml.xmlsec.impl.BasicEncryptionParametersResolver:
Data encryption credential: null</tt><tt><br>
</tt><tt>2014-05-19 23:16:05.108 [DEBUG] :
org.opensaml.xmlsec.impl.BasicEncryptionParametersResolver:
Data encryption algorithm URI:
<a class="moz-txt-link-freetext" href="http://www.w3.org/2009/xmlenc11#aes128-gcm">http://www.w3.org/2009/xmlenc11#aes128-gcm</a></tt><tt><br>
</tt><tt>2014-05-19 23:16:05.108 [DEBUG] :
org.opensaml.xmlsec.impl.BasicEncryptionParametersResolver:
Data encryption KeyInfoGenerator: null</tt><tt><br>
</tt><br>
<br>
<br>
I actually suspected #1, but for that on DEBUG there ought to be a
line like "Resolved data encryption algorithm URI from SAML metadata
EncryptionMethod: {}" and I don't see those, so I actually think you
must have #2.<br>
<br>
Although there's other DEBUG output that I don't see, so maybe the
logging config isn't DEBUG for all of OpenSAML. So I'm still a
little confused.<br>
<br>
It actually logs a bit more on TRACE.<br>
</body>
</html>