Signature verification with Java 8

[Goebel, Brent]

Hi all,

I've been getting a few of the signature verification errors (example below) lately and was wondering if anyone could provide insight about this error. I'm using Java 8 version 91. I did some research on the error and see a forum back in 2013 but at that provided some thoughts on what it may be from (exception when SP has multiple certs that have different lengths) but at the time was determined a bug that was fixed shortly after. Link to forum: http://shibboleth.1660669.n2.nabble.com/Signature-verification-exception-on-Java-7-td7584343.html.


2018-09-13 18:57:48,254 - ERROR [org.opensaml.security.crypto.SigningUtil:219] - Error during signature verification

java.security.SignatureException: Signature length not correct: got 223 but was expecting 256
     at sun.security.rsa.RSASignature.engineVerify(RSASignature.java:189

Thanks ahead for all your help and guidance.

Brent
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20180914/e70d4559/attachment.html>