Encryption Error

Eric_Ochlak at Dell.com Eric_Ochlak at Dell.com
Wed Jul 6 16:29:11 EDT 2016


?

Hello.

I successfully setup the Shibboleth IdP and tested general communication with the https://sp.testshib.org<https://sp.testshib.org/>? a few months ago.  I just recently had the opportunity to restart work on this with a slightly different version of jetty and have been progressing myself back to where I had left off.
I put together a simple servlet for ExternalAuth that communicates with another end point - all of that still works fine.  However, when I call the finishExternalAuthentication method I get the following error in my idp-process.log:
2016-07-06 15:59:13,959 - ERROR [org.apache.velocity:96] - ResourceManager : unable to find resource 'status.vm' in any resource loader.
2016-07-06 15:59:31,490 - INFO [net.shibboleth.idp.authn.impl.ValidateExternalAuthentication:115] - Profile Action ValidateExternalAuthentication: External authentication succeeded for user: admin at boomi.com
2016-07-06 15:59:31,722 - WARN [net.shibboleth.idp.session.impl.StorageBackedIdPSession:257] - Skipping update, AuthenticationResult for flow authn/External in session 651327ff95cbb16eec5f87cc6c360d3db681b30de7a0c63e4fa741341c6cf299 not found in storage
2016-07-06 15:59:32,226 - ERROR [org.opensaml.xmlsec.encryption.support.Encrypter:542] - Error encrypting XMLObject
java.security.InvalidAlgorithmParameterException: unknown parameter type.
at org.bouncycastle.jce.provider.JCEBlockCipher.engineInit(Unknown Source)
2016-07-06 15:59:32,240 - WARN [org.opensaml.saml.saml2.profile.impl.EncryptAssertions:140] - Profile Action EncryptAssertions: Error encrypting assertion
org.opensaml.xmlsec.encryption.support.EncryptionException: Error encrypting XMLObject
at org.opensaml.xmlsec.encryption.support.Encrypter.encryptElement(Encrypter.java:543)
Caused by: java.security.InvalidAlgorithmParameterException: unknown parameter type.
at org.bouncycastle.jce.provider.JCEBlockCipher.engineInit(Unknown Source)
2016-07-06 15:59:32,246 - WARN [org.opensaml.profile.action.impl.LogEvent:76] - An error event occurred while processing the request: UnableToEncrypt

Since it is showing up on my local log, I presumed I had simply forgotten to add the JCE Unlimited Strength files to the version of Java this Jetty is running on, but I double checked and they are there.  In some of my searching I noticed that similar errors are caused by multiple metadata files uploaded to the test instance with the same Entity ID; I suspect that I must have done that at some point in the setting up my configuration again.  If this is the case, could you remove all of the files with the Entity ID "https://nericidp.webproxy.boomi.com/idp/shibboleth?" (I'll just upload the most recent one and make sure to keep the file name the same).  If not, any help/direction in debugging this would be much appreciated!

Thanks!

Eric Ochlak?



Eric Ochlak
Software Dev Staff Engineer
Dell Boomi (www.boomi.com)
Eric_Ochlak at Dell.com
Dell Boomi 300 Berwyn Park, 801 Cassatt Road, Suite 111 Berwyn, PA 19132
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20160706/0bb1b451/attachment.html>


More information about the users mailing list