cannot create bean shibboleth.DataSealer because of KeyNotFoundException
Rainer Hoerbe
rainer at hoerbe.at
Wed Mar 8 15:23:51 EST 2017
To create a new data sealer keystore I use following values from idp.properties:
#idp.sealer.aliasBase = secret
idp.sealer.storePassword = password
idp.sealer.keyPassword = password
Then I create the keystore as:
rm -f sealer.jks
keytool -genseckey -keystore sealer.jks -storetype JCEKS -alias secret \
-keyalg AES -keysize 128 \
-storepass password -keypass password
When starting the IDP jetty complains about not finding the key:
Caused by: org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'shibboleth.DataSealerKeyStrategy' defined in file [/opt/shibboleth-idp/system/conf/global-system.xml]: Invocation of init method failed; nested exception is net.shibboleth.utilities.java.support.component.ComponentInitializationException: Exception loading the default key
at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.initializeBean(AbstractAutowireCapableBeanFactory.java:1578)
...
Caused by: net.shibboleth.utilities.java.support.component.ComponentInitializationException: Exception loading the default key
at net.shibboleth.utilities.java.support.security.BasicKeystoreKeyStrategy.doInitialize(BasicKeystoreKeyStrategy.java:226)
... 94 common frames omitted
Caused by: net.shibboleth.utilities.java.support.security.KeyNotFoundException: Key was not present in keystore
at net.shibboleth.utilities.java.support.security.BasicKeystoreKeyStrategy.getKey(BasicKeystoreKeyStrategy.java:290)
…
What am I missing?
- Rainer
More information about the users
mailing list