Encryption Error

[Brent Putman]

On 7/6/16 6:36 PM, Brent Putman wrote:
>
>
>
> On 7/6/16 6:27 PM, Brent Putman wrote:
>>
>>
>>
>> On 7/6/16 5:40 PM, Cantor, Scott wrote:
>>>
>>> I don't think we're using GCM by default for XML Encryption though, are we? 
>>
>> Not by default, but it would if the metadata said to via the
>> algorithm extensions (which I think the Shib SP metadata does by
>> default IIRC) 
>

And the documented metadata for the TestShib SP does list the GCM ones
first also:

http://www.testshib.org/metadata/testshib-providers.xml

So since the OP has BC loaded as a security provider, it probably in
fact is trying to do GCM.  And if the BC version is <= 1.50 it's
mandatory to set that system property, or else you'll get some error
similar to what he reported.  So that's sounding more likely to be the
cause, actually.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20160706/07c3eb9b/attachment.html>