IDP 3.1 Wrong keysize

[Rhian Resnick]

?Evening,

We are testing IDP 3.1 and discovered that when http://www.w3.org/2001/04/xmlenc#tripledes-cbc is listed first in the SP's ?metadata first the following error is generated. We are running Oracle JDK 8 r40 on Tomcat8. We can work around this by changing the order of possible encrypting key algorithms or removing tripledes-cbc, but we did find it odd and thought you might have seen this before.

Exception:

2015-03-15 22:14:43,593 - ERROR [net.shibboleth.idp.saml.profile:-2] - Uncaught runtime exception
java.security.InvalidParameterException: Wrong keysize: must be equal to 112 or 168
at com.sun.crypto.provider.DESedeKeyGenerator.engineInit(DESedeKeyGenerator.java:94)

==> idp-warn.log <==
2015-03-15 22:14:43,593 - ERROR [net.shibboleth.idp.saml.profile:-2] - Uncaught runtime exception
java.security.InvalidParameterException: Wrong keysize: must be equal to 112 or 168
at com.sun.crypto.provider.DESedeKeyGenerator.engineInit(DESedeKeyGenerator.java:94)


Error Message:

?

Web Login Service - Uncaught Exception
A software error was encountered that prevents normal operation:

java.security.InvalidParameterException: Wrong keysize: must be equal to 112 or 168

Please report this problem to your Help Desk or administrative staff. It has also been logged for an administrator to review.

?
Thanks



Rhian Resnick

Assistant Director Middleware and HPC

Office of Information Technology?


?Florida Atlantic University

777 Glades Road, CM22, Rm 218

Boca Raton, FL 33431

Phone 561.297.2647

Fax 561.297.0222

 ?<https://hpc.fau.edu/wp-content/uploads/2015/01/image.jpg>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20150316/4544a558/attachment.html