decryption problem

[Christopher Bongaarts]

One of our SPs is having issues decrypting assertions.   Messages from 
shibd.log:

2012-06-17 16:47:22 DEBUG XMLTooling.CredentialCriteria [2]: key 
algorithm didn't match ('AES' != 'RSA')
2012-06-17 16:47:22 DEBUG XMLTooling.CredentialCriteria [2]: keys didn't 
match
2012-06-17 16:47:22 ERROR Shibboleth.SSO.SAML2 [2]: Unable to resolve 
any key decryption keys.

My best guess is that the SP's cert doesn't match the private key, but 
I've had him regenerate keys 3 times now with identical results, so I 
thought I'd at least check before making him do it again...

(Platform is Redhat Linux 5 or 6, btw.)
-- 
%%  Christopher A. Bongaarts   %%  cab at umn.edu          %%
%%  OIT - Identity Management  %%  http://umn.edu/~cab  %%
%%  University of Minnesota    %%  +1 (612) 625-1809    %%