algorithm URI was invalid: http://www.w3.org/2001/04/xmlenc#aes128-cbc

[Christopher Bongaarts]

On 9/22/2013 12:29 PM, Joy Veronneau wrote:
> This morning I upgraded our Shibboleth IDP from version 2.3.3 to version 2.4. I am seeing quite a few of these errors (below). Most of our SPs are working fine but there seem to be 2 that are having this issue, maybe Maxient and Atlas Illiad.
>
> Any ideas what might be causing this and how to fix it?
>
> 13:24:03.463 - ERROR [org.opensaml.xml.encryption.Encrypter:649] - Could not generate encryption key, algorithm URI was invalid:http://www.w3.org/2001/04/xmlenc#aes128-cbc
> 13:24:03.467 - ERROR [edu.internet2.middleware.shibboleth.idp.profile.saml2.AbstractSAML2ProfileHandler:294] - Unable to encrypt assertion
> org.opensaml.xml.encryption.EncryptionException: Could not generate encryption key, algorithm URI was invalid:http://www.w3.org/2001/04/xmlenc#aes128-cbc

Is there a difference in the metadata between the afflicted and working 
SPs?  Perhaps in the
<EncryptionMethod> elements?

If the IdP uses the order as preference, rearranging those lines might help.

Or maybe there's a nonprinting character invading the URI?

-- 
%%  Christopher A. Bongaarts   %%  cab at umn.edu          %%
%%  OIT - Identity Management  %%  http://umn.edu/~cab  %%
%%  University of Minnesota    %%  +1 (612) 625-1809    %%