Encryption Error

[Brent Putman]

On 7/6/16 4:29 PM, Eric_Ochlak at Dell.com wrote:
>
> ​
>
> Hello.
>
> 2016-07-06 15:59:32,240 - WARN
> [org.opensaml.saml.saml2.profile.impl.EncryptAssertions:140] -
> Profile Action EncryptAssertions: Error encrypting assertion
> org.opensaml.xmlsec.encryption.support.EncryptionException: Error
> encrypting XMLObject
> at
> org.opensaml.xmlsec.encryption.support.Encrypter.encryptElement(Encrypter.java:543)
> Caused by: java.security.InvalidAlgorithmParameterException: unknown
> parameter type.
> at org.bouncycastle.jce.provider.JCEBlockCipher.engineInit(Unknown
> Source)
>

Just a stab in the dark but:  If your BC version is <= 1.50 and if it's
trying to do XML encryption with AES in GCM mode, then you can try
setting this system property:
org.apache.xml.security.cipher.gcm.useIvParameterSpec=true

That's because BC <= 1.50 doesn't support the new
javax.crypto.spec.GCMParameterSpec that exists in Java 7+ (which is
otherwise found reflectively), and instead requires use of the older
javax.crypto.spec.IvParameterSpec.IvParameterSpec.




-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20160706/d6b38c50/attachment.html>