Cookie Encryption Key

[Ramon Pfeiffer]

I went ahead and disabled the use of the Cookie Encryption Key. On
startup, the error below is logged.

Apparently, in lines 168 - 176 of file system/conf/global-system.xml, a
default keystore of type JCEKS and with the alias secret is configured.
Can this be the cause of it?

Any help is greatly appreciated!

Thanks
Ramon


2017-07-20 11:45:54,657 - ERROR
[net.shibboleth.utilities.java.support.security.BasicKeystoreKeyStrategy:338]
- IOException updating key version
java.io.FileNotFoundException: Could not open ServletContext resource [/]
        at
org.springframework.web.context.support.ServletContextResource.getInputStream(ServletContextResource.java:141)
2017-07-20 11:45:54,659 - ERROR
[net.shibboleth.utilities.java.support.security.BasicKeystoreKeyStrategy:225]
- Error loading default key from base name 'secret'
java.security.KeyException: java.io.FileNotFoundException: Could not
open ServletContext resource [/]
        at
net.shibboleth.utilities.java.support.security.BasicKeystoreKeyStrategy.updateDefaultKey(BasicKeystoreKeyStrategy.java:339)
Caused by: java.io.FileNotFoundException: Could not open ServletContext
resource [/]
        at
org.springframework.web.context.support.ServletContextResource.getInputStream(ServletContextResource.java:141)
2017-07-20 11:45:54,662 - WARN
[net.shibboleth.ext.spring.context.DelimiterAwareApplicationContext:549]
- Exception encountered during context initialization - cancelling
refresh attempt:
org.springframework.beans.factory.BeanCreationException: Error creating
bean with name 'encodingTicketService' defined in file
[/opt/shibboleth-idp/system/conf/cas-protocol-system.xml]: Cannot
resolve reference to bean 'encodedTicketSealer' while setting
constructor argument; nested exception is
org.springframework.beans.factory.BeanCreationException: Error creating
bean with name 'encodedTicketSealer' defined in file
[/opt/shibboleth-idp/system/conf/cas-protocol-system.xml]: Cannot
resolve reference to bean 'shibboleth.DataSealerKeyStrategy' while
setting bean property 'keyStrategy'; nested exception is
org.springframework.beans.factory.BeanCreationException: Error creating
bean with name 'shibboleth.DataSealerKeyStrategy' defined in file
[/opt/shibboleth-idp/system/conf/global-system.xml]: Invocation of init
method failed; nested exception is
net.shibboleth.utilities.java.support.component.ComponentInitializationException:
Exception loading the default key
2017-07-20 11:45:54,768 - ERROR
[org.springframework.web.context.ContextLoader:351] - Context
initialization failed
org.springframework.beans.factory.BeanCreationException: Error creating
bean with name 'encodingTicketService' defined in file
[/opt/shibboleth-idp/system/conf/cas-protocol-system.xml]: Cannot
resolve reference to bean 'encodedTicketSealer' while setting
constructor argument; nested exception is
org.springframework.beans.factory.BeanCreationException: Error creating
bean with name 'encodedTicketSealer' defined in file
[/opt/shibboleth-idp/system/conf/cas-protocol-system.xml]: Cannot
resolve reference to bean 'shibboleth.DataSealerKeyStrategy' while
setting bean property 'keyStrategy'; nested exception is
org.springframework.beans.factory.BeanCreationException: Error creating
bean with name 'shibboleth.DataSealerKeyStrategy' defined in file
[/opt/shibboleth-idp/system/conf/global-system.xml]: Invocation of init
method failed; nested exception is
net.shibboleth.utilities.java.support.component.ComponentInitializationException:
Exception loading the default key
        at
org.springframework.beans.factory.support.BeanDefinitionValueResolver.resolveReference(BeanDefinitionValueResolver.java:359)
Caused by: org.springframework.beans.factory.BeanCreationException:
Error creating bean with name 'encodedTicketSealer' defined in file
[/opt/shibboleth-idp/system/conf/cas-protocol-system.xml]: Cannot
resolve reference to bean 'shibboleth.DataSealerKeyStrategy' while
setting bean property 'keyStrategy'; nested exception is
org.springframework.beans.factory.BeanCreationException: Error creating
bean with name 'shibboleth.DataSealerKeyStrategy' defined in file
[/opt/shibboleth-idp/system/conf/global-system.xml]: Invocation of init
method failed; nested exception is
net.shibboleth.utilities.java.support.component.ComponentInitializationException:
Exception loading the default key
        at
org.springframework.beans.factory.support.BeanDefinitionValueResolver.resolveReference(BeanDefinitionValueResolver.java:359)
Caused by: org.springframework.beans.factory.BeanCreationException:
Error creating bean with name 'shibboleth.DataSealerKeyStrategy' defined
in file [/opt/shibboleth-idp/system/conf/global-system.xml]: Invocation
of init method failed; nested exception is
net.shibboleth.utilities.java.support.component.ComponentInitializationException:
Exception loading the default key
        at
org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.initializeBean(AbstractAutowireCapableBeanFactory.java:1578)
Caused by:
net.shibboleth.utilities.java.support.component.ComponentInitializationException:
Exception loading the default key
        at
net.shibboleth.utilities.java.support.security.BasicKeystoreKeyStrategy.doInitialize(BasicKeystoreKeyStrategy.java:226)
Caused by: java.security.KeyException: java.io.FileNotFoundException:
Could not open ServletContext resource [/]
        at
net.shibboleth.utilities.java.support.security.BasicKeystoreKeyStrategy.updateDefaultKey(BasicKeystoreKeyStrategy.java:339)
Caused by: java.io.FileNotFoundException: Could not open ServletContext
resource [/]
        at
org.springframework.web.context.support.ServletContextResource.getInputStream(ServletContextResource.java:141)


--
Universität Tübingen
Zentrum für Datenverarbeitung
Wächterstraße 76
72074 Tübingen

E-Mail: ramon.pfeiffer at uni-tuebingen.de
Telefon: +49-7071-29-70213


-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 5217 bytes
Desc: S/MIME Cryptographic Signature
URL: <http://shibboleth.net/pipermail/users/attachments/20170720/f05ed229/attachment.p7s>