<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body text="#000000" bgcolor="#FFFFFF">
<p><br>
</p>
<br>
<div class="moz-cite-prefix">On 10/19/18 3:11 PM, mbingi wrote:<br>
</div>
<blockquote type="cite"
cite="mid:1539976316408-0.post@n2.nabble.com">
<pre wrap="">I am using MacOS with java version "1.8.0_121".</pre>
</blockquote>
<br>
The important thing here is the exact version of the Oracle (or
Oracle-derived) JDK and the JCE crypto policy effectively in use.
With 1.8.0_121 you are effectively running with the 'limited' JCE
policy if you haven't specifically installed the 'unlimited' policy
files. Our tests require you to use the 'unlimited' policy.<br>
<br>
Either 1) update to 1.8.0_161 or newer, which has 'unlimited' policy
enabled by default (no additional file install needed) or 2) install
the unlimited JCE policy files. That is in general described here:<br>
<br>
<a class="moz-txt-link-freetext" href="https://www.oracle.com/technetwork/java/javase/downloads/jce-all-download-5170447.html">https://www.oracle.com/technetwork/java/javase/downloads/jce-all-download-5170447.html</a><br>
<br>
<blockquote type="cite"
cite="mid:1539976316408-0.post@n2.nabble.com">
<pre wrap=""> I am using opensaml v3.3.1</pre>
</blockquote>
<br>
FYI, just last week we released 3.4.0.<br>
<br>
<br>
<blockquote type="cite"
cite="mid:1539976316408-0.post@n2.nabble.com">
<pre wrap="">
code without any changes on my local machine and building it.
</pre>
</blockquote>
<br>
That's fine, you can do that if you really want ... but if you
aren't making any local changes or testing a patch, etc, then why
not just use our binary builds instead of building locally?<br>
</body>
</html>