deleting internal encryption key (sealer.jks)

ERLER Peter peter.erler at tirol.gv.at
Tue Dec 6 06:36:03 EST 2016


Hello!

I wanted to eliminate sealer.jks, so I followed *Disable use of internal encryption key* https://wiki.shibboleth.net/confluence/x/hQBrAQ

I got this exception at restart:

---
Dez 06, 2016 12:06:24 PM org.apache.catalina.core.StandardContext listenerStart
SCHWERWIEGEND: Exception sending context initialized event to listener instance of class org.springframework.web.context.ContextLoaderListener
org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'encodingTicketService' defined in file [C:\development\ws\server\aeiconfig\idp3\default\system\conf\cas-protocol-system.xml]: Cannot resolve reference to bean 'encodedTicketSealer' while setting constructor argument; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'encodedTicketSealer' defined in file [C:\development\ws\server\aeiconfig\idp3\default\system\conf\cas-protocol-system.xml]: Cannot resolve reference to bean 'shibboleth.DataSealerKeyStrategy' while setting bean property 'keyStrategy'; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'shibboleth.DataSealerKeyStrategy' defined in file [C:\development\ws\server\aeiconfig\idp3\default\system\conf\global-system.xml]: Invocation of init method failed; nested exception is net.shibboleth.utilities.java.support.component.ComponentInitializationException: Exception loading the default key
	at org.springframework.beans.factory.support.BeanDefinitionValueResolver.resolveReference(BeanDefinitionValueResolver.java:359)
	at org.springframework.beans.factory.support.BeanDefinitionValueResolver.resolveValueIfNecessary(BeanDefinitionValueResolver.java:108)
	...
---


A possible fix is

---
Index: /system/conf/cas-protocol-system.xml
===================================================================
@@ -14,7 +14,7 @@
     <bean id="simpleTicketService" class="net.shibboleth.idp.cas.ticket.impl.SimpleTicketService"
           c:service-ref="#{'%{idp.cas.StorageService:shibboleth.StorageService}'.trim()}" />
 
-    <bean id="encodingTicketService" class="net.shibboleth.idp.cas.ticket.impl.EncodingTicketService"
+    <bean id="encodingTicketService" class="net.shibboleth.idp.cas.ticket.impl.EncodingTicketService" lazy-init="true"
           c:service-ref="#{'%{idp.cas.StorageService:shibboleth.StorageService}'.trim()}"
           c:sealer-ref="encodedTicketSealer"/>

---

Peter Erler



More information about the users mailing list