javax.crypto.AEADBadTagException: Tag mismatch!

[El Manaa Amine]

Thanks Tom! I'll try this.

I've got another question:

- In my set-up:

Azure application gateway (public certificate) --> Jetty(internal key and certificate in a keystore) --> Shibboleth (has its own encryption and signing keys in /opt/shibboleth-idp/credentials).

The public key+ certificate, the ones used by Jetty and the ones used by Shibboleth are not the same. However, the CN is the same. This shouldn't pause problems , right?

-----Original Message-----
From: users <users-bounces at shibboleth.net> On Behalf Of Tom Zeller
Sent: mardi 8 août 2023 16:52
To: Shib Users <users at shibboleth.net>
Subject: Re: javax.crypto.AEADBadTagException: Tag mismatch!

[You don't often get email from tzeller at dragonacea.biz. Learn why this is important at https://aka.ms/LearnAboutSenderIdentification ]

Maybe the secret key is not in sync on the test server.

https://shibboleth.atlassian.net/wiki/spaces/IDP4/pages/1265631799/SecretKeyManagement

> [ClientStorageService:474] org.opensaml.storage.impl.client.ClientStorageService.load - StorageService shibboleth.ClientSessionStorageService: Exception unwrapping secured data
>
> net.shibboleth.utilities.java.support.security.DataSealerException: Exception unwrapping data
--
For Consortium Member technical support, see https://shibboleth.atlassian.net/wiki/x/ZYEpPw
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net