xmltooling issues SP 2.4.3 IIS

Zweifel, Daniel danz at wustl.edu
Wed Aug 3 14:53:42 BST 2011


Scott,

I'll work on getting a bug filed. We switched to cookie for relayState and that seems to have resolved the issue.

Thanks,
Dan


-----Original Message-----
From: users-bounces at shibboleth.net [mailto:users-bounces at shibboleth.net] On Behalf Of Cantor, Scott E.
Sent: Monday, August 01, 2011 4:46 PM
To: users at shibboleth.net
Subject: Re: xmltooling issues SP 2.4.3 IIS

One of my colleagues pointed out that the only place that exception message is used is in the relay state and POST data preservation code. So I imagine it's the relayState thing. In 2.4.1, I expanded the space used for the random key to 128 bits, but because of where the values are generated, I don't use the "secure" random generator, so I suspect it's just the default PRNG causing problems.

Please file a bug on this if you would, and in the meantime, switching back to "cookie" for the relayState should fix it.

-- Scott

--
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net


More information about the users mailing list