Help getting started with idp v3, getting error " Validation failure: Failed to resolve both a data and a key encryption credential"

[Marc Boorshtein]

On Tue, Mar 10, 2015 at 9:57 AM, Cantor, Scott <cantor.2 at osu.edu> wrote:

> On 3/10/15, 9:32 AM, "Marc Boorshtein" <mboorshtein at gmail.com> wrote:
> >
> >I'm getting the idp up and running for some testing and am running into
> an issue.  The idp is running on CentOS 6.6 and tomcat 7 with openjdk and
> an apache 2.2 instance in front of it.
>
> For the record, tomcat 7 is not supported.
>

Noted


>
> >Instead of being prompted to login I get the following error:
> >WARN [org.opensaml.xmlsec.impl.BasicEncryptionParametersResolver:221] -
> Validation failure: Failed to resolve both a data and a key encryption
> credential
> >I'm guessing this is because the idp expects the authnrequest to be
> signed and/or encrypted?
>
> No. I'm not even that familiar with the errors that happen yet, but my
> guess would be you have encryption enabled (the default), not optional (the
> default), and the SP metadata contains no key.
>
>
OK, that makes sense.  I set idp.encryption.optional to true and was able
to get past this error.

Thanks
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20150310/b97e5686/attachment.html