javax.crypto.AEADBadTagException: Tag mismatch!

[El Manaa Amine]

Thanks Peter!

-----Original Message-----
From: users <users-bounces at shibboleth.net> On Behalf Of Peter Schober via users
Sent: jeudi 10 août 2023 17:07
To: users at shibboleth.net
Cc: Peter Schober <peter.schober at univie.ac.at>
Subject: Re: javax.crypto.AEADBadTagException: Tag mismatch!

* El Manaa Amine via users <users at shibboleth.net> [2023-08-10 16:43]:
> The public key+ certificate, the ones used by Jetty and the ones used
> by Shibboleth are not the same. However, the CN is the same. This
> shouldn't pause problems , right?

The certificate structures of keys used for signing and encrypting SAML protocol messages do not matter, correct.
Also, those are not used for HTTPS.

Whatever keys Jetty uses for HTTP also seems irrelevant as those are neither seen by end users not are they used for SAML -- they are an implementantion detail of your deployment to secure the connection between the system terminating end-users' TLS connections ("Azure application gateway") and your Java Servlet container (Jetty) running the IDP software.
(AFAIU from your description of your deployment.)

-peter
--
For Consortium Member technical support, see https://shibboleth.atlassian.net/wiki/x/ZYEpPw
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net