IdP 2.4.4 won't load DER keypair

[Cantor, Scott]

On 3/1/15, 2:04 AM, "Tom Poage" <tfpoage at ucdavis.edu> wrote:

>Evening,
>
>Trying to configure IdP 2.4.4 and it will not load the following keypair:

Please file a bug.

>WAG, something introduced with the 2.4.x branch? SC-191?

In 2.4.1, there was a change, yes, and this is an inadvertent consequence. 
The documentation in the schema about what was/is supported is just wrong 
(it always was, just in different ways). The fix was to handle an "inline" 
key encoded into the XML, but it changed the behavior in the non-inline 
case.

>Note: Now it seems if I simply base-64 encode the DER public key (no PEM 
>'wrapper'), the key pair seems to load (not tested for function just 
>yet), so now I'm left slightly astonished, but at least not completely 
>perplexed. :-)

That would work around the bug because a base64-decode step was added in 
the wrong spot to fix the inline case, so it's applying to the filesystem 
case.

Obviously, a fix is only slightly likely to ever come out, so you should 
just work around it, but if you report it, we'll get it fixed if a patch 
is ever done.

-- Scott