Encryption Error

[Brent Putman]

On 7/6/16 5:40 PM, Cantor, Scott wrote:
>
> I don't think we're using GCM by default for XML Encryption though, are we? 

Not by default, but it would if the metadata said to via the algorithm
extensions (which I think the Shib SP metadata does by default IIRC)
and it was supported by the platform (security providers).

> In fact, GCM didn't even work properly with Java 7's JCE, that I recall.

I'm not sure, I can't keep them straight. It might not with Oracle's
default security provider set (although I could be wrong), but pretty
sure it does with BC configured.


If there's any question, earlier on in the logs on DEBUG the encryption
parameters resolver will log what algorithms and so forth were chosen.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20160706/b8e7be05/attachment.html>