deleting internal encryption key (sealer.jks)
ERLER Peter
peter.erler at tirol.gv.at
Tue Dec 6 06:36:03 EST 2016
Hello!
I wanted to eliminate sealer.jks, so I followed *Disable use of internal encryption key* https://wiki.shibboleth.net/confluence/x/hQBrAQ
I got this exception at restart:
---
Dez 06, 2016 12:06:24 PM org.apache.catalina.core.StandardContext listenerStart
SCHWERWIEGEND: Exception sending context initialized event to listener instance of class org.springframework.web.context.ContextLoaderListener
org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'encodingTicketService' defined in file [C:\development\ws\server\aeiconfig\idp3\default\system\conf\cas-protocol-system.xml]: Cannot resolve reference to bean 'encodedTicketSealer' while setting constructor argument; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'encodedTicketSealer' defined in file [C:\development\ws\server\aeiconfig\idp3\default\system\conf\cas-protocol-system.xml]: Cannot resolve reference to bean 'shibboleth.DataSealerKeyStrategy' while setting bean property 'keyStrategy'; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'shibboleth.DataSealerKeyStrategy' defined in file [C:\development\ws\server\aeiconfig\idp3\default\system\conf\global-system.xml]: Invocation of init method failed; nested exception is net.shibboleth.utilities.java.support.component.ComponentInitializationException: Exception loading the default key
at org.springframework.beans.factory.support.BeanDefinitionValueResolver.resolveReference(BeanDefinitionValueResolver.java:359)
at org.springframework.beans.factory.support.BeanDefinitionValueResolver.resolveValueIfNecessary(BeanDefinitionValueResolver.java:108)
...
---
A possible fix is
---
Index: /system/conf/cas-protocol-system.xml
===================================================================
@@ -14,7 +14,7 @@
<bean id="simpleTicketService" class="net.shibboleth.idp.cas.ticket.impl.SimpleTicketService"
c:service-ref="#{'%{idp.cas.StorageService:shibboleth.StorageService}'.trim()}" />
- <bean id="encodingTicketService" class="net.shibboleth.idp.cas.ticket.impl.EncodingTicketService"
+ <bean id="encodingTicketService" class="net.shibboleth.idp.cas.ticket.impl.EncodingTicketService" lazy-init="true"
c:service-ref="#{'%{idp.cas.StorageService:shibboleth.StorageService}'.trim()}"
c:sealer-ref="encodedTicketSealer"/>
---
Peter Erler
More information about the users
mailing list