algorithm URI was invalid: http://www.w3.org/2001/04/xmlenc#aes128-cbc

Cantor, Scott cantor.2 at osu.edu
Thu Sep 26 14:03:30 EDT 2013


On 9/26/13 1:55 PM, "Brent Putman" <putmanb at georgetown.edu> wrote:

>For #1, the only thing I can think of is:  are you by chance using the
>newly released custom security config bean to make custom settings for
>algorithms, etc?  If so, then either a hard-to-spot typo there in your
>actual bean wiring data, or perhaps failure in the code to trim
>whitespace or something could mean that the lookup could fail.

Were that the case, though, there's no way it would work for *any* SPs. I
can't think of any scenario  in today's IdP that could be specific to one
SP unless some kind of interaction were possible between code that is
looking for the RSA key in metadata. So perhaps the error is somehow
mis-reporting itself as being about the AES algorithm.

A lot of this comes down to that issue. All the messages have alluded to
the claim that encryption is working for some. I think that claim has to
be examined.

-- Scott




More information about the users mailing list