<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body>
<p><br>
</p>
<div class="moz-cite-prefix">On 9/6/21 10:25 AM,
<a class="moz-txt-link-abbreviated" href="mailto:aabiabdallah@gmail.com">aabiabdallah@gmail.com</a> wrote:<br>
</div>
<blockquote type="cite"
cite="mid:35b4da645d73b8372983b7c440f4ecaf3500e3be.camel@gmail.com">
<meta http-equiv="content-type" content="text/html; charset=UTF-8">
<div style="unicode-bidi: plaintext; caret-color: rgb(0, 0, 0);
color: rgb(0, 0, 0); font-family: "Fira Sans";
font-size: 13.333333015441895px; font-style: normal;
font-variant-caps: normal; font-weight: 350; letter-spacing:
normal; orphans: auto; text-align: start; text-indent: 0px;
text-transform: none; white-space: normal; widows: auto;
word-spacing: 0px; -webkit-tap-highlight-color: rgba(0, 0, 0,
0.4); -webkit-text-stroke-width: 0px; text-decoration: none;">Hello
everyone,</div>
<div style="unicode-bidi: plaintext; caret-color: rgb(0, 0, 0);
color: rgb(0, 0, 0); font-family: "Fira Sans";
font-size: 13.333333015441895px; font-style: normal;
font-variant-caps: normal; font-weight: 350; letter-spacing:
normal; orphans: auto; text-align: start; text-indent: 0px;
text-transform: none; white-space: normal; widows: auto;
word-spacing: 0px; -webkit-tap-highlight-color: rgba(0, 0, 0,
0.4); -webkit-text-stroke-width: 0px; text-decoration: none;"><br>
</div>
<div style="unicode-bidi: plaintext; caret-color: rgb(0, 0, 0);
color: rgb(0, 0, 0); font-family: "Fira Sans";
font-size: 13.333333015441895px; font-style: normal;
font-variant-caps: normal; font-weight: 350; letter-spacing:
normal; orphans: auto; text-align: start; text-indent: 0px;
text-transform: none; white-space: normal; widows: auto;
word-spacing: 0px; -webkit-tap-highlight-color: rgba(0, 0, 0,
0.4); -webkit-text-stroke-width: 0px; text-decoration: none;">I
was experimenting with a project using OpenSAML V3</div>
</blockquote>
<p><br>
</p>
<p>V3 has been EOL for a very long time, and is totally
unsupported. Please consider updating to V4.</p>
<p><br>
</p>
<p><br>
</p>
<blockquote type="cite"
cite="mid:35b4da645d73b8372983b7c440f4ecaf3500e3be.camel@gmail.com">
<div style="unicode-bidi: plaintext; caret-color: rgb(0, 0, 0);
color: rgb(0, 0, 0); font-family: "Fira Sans";
font-size: 13.333333015441895px; font-style: normal;
font-variant-caps: normal; font-weight: 350; letter-spacing:
normal; orphans: auto; text-align: start; text-indent: 0px;
text-transform: none; white-space: normal; widows: auto;
word-spacing: 0px; -webkit-tap-highlight-color: rgba(0, 0, 0,
0.4); -webkit-text-stroke-width: 0px; text-decoration: none;">
and I was able to successfully read assertions and their
attributes. However, when I try to using Decrypter to decrypt an
encrypted assertion I can an error (see below stack trace). Does
anyone know what the root cause of this issue might be?</div>
</blockquote>
<p><br>
</p>
<p>I don't see any obvious issue with the XML of the actual Response
message you posted. Based on the error:</p>
<p><br>
</p>
<div style="unicode-bidi: plaintext; caret-color: rgb(0, 0, 0);
color: rgb(0, 0, 0); font-family: "Fira Sans";
font-size: 13.333333015441895px; font-style: normal;
font-variant-caps: normal; font-weight: 350; letter-spacing:
normal; orphans: auto; text-align: start; text-indent: 0px;
text-transform: none; white-space: normal; widows: auto;
word-spacing: 0px; -webkit-tap-highlight-color: rgba(0, 0, 0,
0.4); -webkit-text-stroke-width: 0px; text-decoration: none;">
<blockquote type="cite">
<div style="unicode-bidi: plaintext; caret-color: rgb(0, 0, 0);
color: rgb(0, 0, 0); font-family: "Fira Sans";
font-size: 13.333333015441895px; font-style: normal;
font-variant-caps: normal; font-weight: 350; letter-spacing:
normal; orphans: auto; text-align: start; text-indent: 0px;
text-transform: none; white-space: normal; widows: auto;
word-spacing: 0px; -webkit-tap-highlight-color: rgba(0, 0, 0,
0.4); -webkit-text-stroke-width: 0px; text-decoration: none;">Caused
by: org.xml.sax.SAXParseException; lineNumber: 1;
columnNumber: 214; The prefix "saml" for element
"saml:Assertion" is not bound.</div>
</blockquote>
</div>
<p><br>
</p>
<p>there's something wrong with the decl of the SAML 2 Core
namespace - it's missing in a context where it needs to be
present. Possibly in the decrypted Assertion the 'saml' prefix is
used and not declared with an 'xmlns:saml' in the Assertion.</p>
<p>Or could be you are using the OpenSAML components improperly, and
the namespaces aren't getting processed properly. It's hard to
tell from what you posted.</p>
<p><br>
</p>
<p><br>
</p>
<p>
<blockquote type="cite"><xenc:EncryptionMethod Algorithm="<a
href="http://www.w3.org/2001/04/xmlenc#rsa-1_5%22/">http://www.w3.org/2001/04/xmlenc#rsa-1_5"/</a>></blockquote>
<br>
</p>
<p>Not related to your question or problem, but RSA 1.5 has been
considered weak and insecure for some time now. Modern versions
of OpenSAML exclude that from acceptability - at least in the
components that use the algorithm include/exclude lists - and so
won't even process it successfully. </p>
<p>You should consider asking the encrypting party to use a more
modern RSA key encryption algorithm here, if possible.<br>
</p>
<br>
</body>
</html>