Encryption stops

[Clayton]

"Shib Users users-at-shibboleth.net |Shib|" <3unnche4it at sneakemail.com>
writes:
>On 6/2/14, 4:09 PM, "Jeff McCullough"  wrote:
>>
>>We are having an issue with encryption on our IDP. We are using IDP
>>2.3.8. The server runs fine for awhile, and then we notice that sites
>>using encryption will stop working with the error on the IDP being:
>>
>>Unable to construct encrypter
>>org.opensaml.xml.security.SecurityException: Could not resolve key
>>encryption credential
>That pretty much means the metadata isn't loaded at the point that it's
>trying to look for a key to use.
>>Originally we were guessing it was a JVM issue. It is looking like it is
>>something else, as we have found it really only requires a tomcat6
>>restart to get encryption working again. Has anyone else run into this?
>>Any thoughts about further troubleshooting?Thanks,Jeff
>I can't imagine there's nothing else in the log than that, but if not,
>there's really nothing to go on.
>-- Scott

I think there's an expiration time in the metadata settings.
Maybe you have this source of metadata set to expire in like 30 minutes,
but only re-retrieve it once a day or once an hour?

--Clayton

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20140602/f3392551/attachment.html