Shibboleth 2.5.1 blacklist of RSA 1.5

[praveen]

Here was the part of the log that first led me to believe the customer uses
rsa 1.5, and led me down the path ..

2013-01-14 13:54:43 WARN XMLTooling.Decrypter [11]: XMLSecurity exception
while decrypting key: XSECAlgorithmMapper::mapURIToHandler - URI
http://www.w3.org/2001/04/xmlenc#rsa-1_5 disallowed by whitelist/blacklist
policy
2013-01-14 13:54:43 WARN XMLTooling.Decrypter [11]: unable to decrypt key,
generating random key for defensive purposes
2013-01-14 13:54:43 ERROR Shibboleth.SSO.SAML2 [11]: failed to decrypt
NameID: XMLSecurity exception while decrypting:
OpenSSL:SymmetricKey::decryptFinish - Out of range padding value in final
block
2013-01-14 13:54:43 WARN Shibboleth.AttributeResolver.Query [11]: can't
attempt attribute query, either no NameID or no metadata to use



--
View this message in context: http://shibboleth.1660669.n2.nabble.com/Shibboleth-2-5-1-blacklist-of-RSA-1-5-tp7584187p7584336.html
Sent from the Shibboleth - Users mailing list archive at Nabble.com.