Error creating SP metadata when adding X509 certificate for encryption

[Tom Scavo]

On Mon, Feb 26, 2018 at 6:33 PM, Lipscomb, Gary <glipscomb at csu.edu.au> wrote:
>
> 2018-02-27 10:10:38,718 - ERROR [org.springframework.webflow.execution.ActionExecutionException:76] -
> org.springframework.webflow.execution.ActionExecutionException: Exception thrown executing net.shibboleth.idp.saml.saml2.profile.impl.PopulateEncryptionParameters at a1be63e in state 'OutboundContextsAndSecurityParameters' of flow 'SAML2/Unsolicited/SSO' -- action execution attributes were 'map[[empty]]'
>         at org.springframework.webflow.execution.ActionExecutor.execute(ActionExecutor.java:60)
> Caused by: org.cryptacular.StreamException: IO error
>         at org.cryptacular.util.CertUtil.readCertificate(CertUtil.java:256)
> Caused by: java.io.IOException: Short read of DER length
>         at sun.security.util.DerInputStream.getLength(DerInputStream.java:582)

The certificate is faulty. I copy-and-pasted the certificate into a
file and ran openssl:

$ openssl x509 -text -noout -in junk.pem
unable to load certificate

Perhaps you should let them update their metadata with an appropriate
certificate?

Tom