Invalid OpenSSL traditional private key format IDP3.x

[Shweta Kautia]

Hello,

We have an old IDP 2.x, with an old cert. When moving to new IDP 3.x, the old cert gives the following error. However, new generated pair of key/cert seems to work fine. Does this mean we will have to use the new one, or is it possible to keep the old cert and make it work with IDP 3.x with different settings etc?

Thanks,
Shweta



2016-08-03 16:14:34,733 - WARN [net.shibboleth.ext.spring.context.FilesystemGenericApplicationContext:545] - Exception encountered during context initialization - cancelling refresh attempt: org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'shibboleth.DefaultEncryptionCredentials': Cannot create inner bean 'net.shibboleth.idp.profile.spring.factory.BasicX509CredentialFactoryBean#1319bc2a' of type [net.shibboleth.idp.profile.spring.factory.BasicX509CredentialFactoryBean] while setting bean property 'sourceList' with key [0]; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'net.shibboleth.idp.profile.spring.factory.BasicX509CredentialFactoryBean#1319bc2a': FactoryBean threw exception on object creation; nested exception is java.lang.IllegalArgumentException: Invalid OpenSSL traditional private key format.
2016-08-03 16:14:34,738 - ERROR [net.shibboleth.utilities.java.support.service.AbstractReloadableService:181] - Service 'shibboleth.RelyingPartyResolverService': Initial load failed
net.shibboleth.utilities.java.support.service.ServiceException: org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'shibboleth.DefaultEncryptionCredentials': Cannot create inner bean 'net.shibboleth.idp.profile.spring.factory.BasicX509CredentialFactoryBean#1319bc2a' of type [net.shibboleth.idp.profile.spring.factory.BasicX509CredentialFactoryBean] while setting bean property 'sourceList' with key [0]; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'net.shibboleth.idp.profile.spring.factory.BasicX509CredentialFactoryBean#1319bc2a': FactoryBean threw exception on object creation; nested exception is java.lang.IllegalArgumentException: Invalid OpenSSL traditional private key format.
at net.shibboleth.ext.spring.service.ReloadableSpringService.doReload(ReloadableSpringService.java:334)
Caused by: org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'shibboleth.DefaultEncryptionCredentials': Cannot create inner bean 'net.shibboleth.idp.profile.spring.factory.BasicX509CredentialFactoryBean#1319bc2a' of type [net.shibboleth.idp.profile.spring.factory.BasicX509CredentialFactoryBean] while setting bean property 'sourceList' with key [0]; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'net.shibboleth.idp.profile.spring.factory.BasicX509CredentialFactoryBean#1319bc2a': FactoryBean threw exception on object creation; nested exception is java.lang.IllegalArgumentException: Invalid OpenSSL traditional private key format.
at org.springframework.beans.factory.support.BeanDefinitionValueResolver.resolveInnerBean(BeanDefinitionValueResolver.java:313)
Caused by: org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'net.shibboleth.idp.profile.spring.factory.BasicX509CredentialFactoryBean#1319bc2a': FactoryBean threw exception on object creation; nested exception is java.lang.IllegalArgumentException: Invalid OpenSSL traditional private key format.
at org.springframework.beans.factory.support.FactoryBeanRegistrySupport.doGetObjectFromFactoryBean(FactoryBeanRegistrySupport.java:175)
Caused by: java.lang.IllegalArgumentException: Invalid OpenSSL traditional private key format.
at org.cryptacular.asn.OpenSSLPrivateKeyDecoder.decodeASN1(OpenSSLPrivateKeyDecoder.java:130)

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20160812/f3ce6fcf/attachment-0001.html>