<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=Windows-1252">
</head>
<body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;">
<div style="margin: 0px; font-size: 11px; font-family: Menlo;">bash-4.1$ ls -l jdk/jre/lib/ext/</div>
<div style="margin: 0px; font-size: 11px; font-family: Menlo;">total 24004</div>
<div style="margin: 0px; font-size: 11px; font-family: Menlo;">-rw-r--r-- 1 shibadm shibadm 3860522 Sep 17 20:42 cldrdata.jar</div>
<div style="margin: 0px; font-size: 11px; font-family: Menlo;">-rw-r--r-- 1 shibadm shibadm 8286 Sep 17 20:42 dnsns.jar</div>
<div style="margin: 0px; font-size: 11px; font-family: Menlo;">-rw-r--r-- 1 shibadm shibadm 17257493 Sep 16 12:47 jfxrt.jar</div>
<div style="margin: 0px; font-size: 11px; font-family: Menlo;">-rw-r--r-- 1 shibadm shibadm 1179307 Sep 17 20:42 localedata.jar</div>
<div style="margin: 0px; font-size: 11px; font-family: Menlo;">-rw-r--r-- 1 shibadm shibadm 1227 Sep 17 20:42 meta-index</div>
<div style="margin: 0px; font-size: 11px; font-family: Menlo;">-rw-r--r-- 1 shibadm shibadm 1618833 Sep 17 20:42 nashorn.jar</div>
<div style="margin: 0px; font-size: 11px; font-family: Menlo;">-rw-r--r-- 1 shibadm shibadm 39773 Sep 17 20:42 sunec.jar</div>
<div style="margin: 0px; font-size: 11px; font-family: Menlo;">-rw-r--r-- 1 shibadm shibadm 278033 Sep 17 20:42 sunjce_provider.jar</div>
<div style="margin: 0px; font-size: 11px; font-family: Menlo;">-rw-r--r-- 1 shibadm shibadm 249280 Sep 17 20:42 sunpkcs11.jar</div>
<div style="margin: 0px; font-size: 11px; font-family: Menlo;">-rw-r--r-- 1 shibadm shibadm 68837 Sep 17 20:42 zipfs.jar</div>
<div><br>
</div>
<div>
<blockquote type="cite">
<div bgcolor="#FFFFFF" text="#000000"> jre/lib/security/java.security,</div>
</blockquote>
<br>
</div>
<div>
<div style="margin: 0px; font-size: 11px; font-family: Menlo;">security.provider.1=sun.security.provider.Sun</div>
<div style="margin: 0px; font-size: 11px; font-family: Menlo;">security.provider.2=sun.security.rsa.SunRsaSign</div>
<div style="margin: 0px; font-size: 11px; font-family: Menlo;">security.provider.3=sun.security.ec.SunEC</div>
<div style="margin: 0px; font-size: 11px; font-family: Menlo;">security.provider.4=com.sun.net.ssl.internal.ssl.Provider</div>
<div style="margin: 0px; font-size: 11px; font-family: Menlo;">security.provider.5=com.sun.crypto.provider.SunJCE</div>
<div style="margin: 0px; font-size: 11px; font-family: Menlo;">security.provider.6=sun.security.jgss.SunProvider</div>
<div style="margin: 0px; font-size: 11px; font-family: Menlo;">security.provider.7=com.sun.security.sasl.Provider</div>
<div style="margin: 0px; font-size: 11px; font-family: Menlo;">security.provider.8=org.jcp.xml.dsig.internal.dom.XMLDSigRI</div>
<div style="margin: 0px; font-size: 11px; font-family: Menlo;">security.provider.9=sun.security.smartcardio.SunPCSC</div>
</div>
<div><br>
</div>
<div>
<div>On Jan 12, 2015, at 3:11 PM, Brent Putman <<a href="mailto:putmanb@georgetown.edu">putmanb@georgetown.edu</a>> wrote:</div>
<br class="Apple-interchange-newline">
<blockquote type="cite">
<div bgcolor="#FFFFFF" text="#000000"><br>
<div class="moz-cite-prefix">On 1/12/15 2:55 PM, Hong Ye wrote:<br>
</div>
<blockquote cite="mid:5816C609-5732-4548-9600-CA13DFBA2313@cornell.edu" type="cite">
<div style="margin: 0px; font-size: 11px; font-family: Menlo;">
<div style="margin: 0px;"><br>
<div style="margin: 0px;"><br>
</div>
<div style="margin: 0px;">
<div style="margin: 0px;">-bash-4.1$ /app/shibboleth/environment/jdk/bin/java -version</div>
<div style="margin: 0px;">java version "1.8.0_25"</div>
<div style="margin: 0px;">Java(TM) SE Runtime Environment (build 1.8.0_25-b17)</div>
<div style="margin: 0px;">Java HotSpot(TM) 64-Bit Server VM (build 25.25-b02, mixed mode)</div>
<div style="margin: 0px;"><br>
</div>
</div>
</div>
<br>
</div>
</blockquote>
<br>
<br>
Ok. I'm still baffled. I don't offhand see anything wrong with the way Tomcat is running.
<br>
<br>
Basically, the way it's behaving, it's like either 1) it's not picking up the JCA security provider jars in jre/lib/ext or 2) the security providers aren't being registered at runtime, so they're not available.
<br>
<br>
Re: 1: can you confirm the contents of the JDK's jre/lib/ext (post a file list)?<br>
<br>
Re: 2: can you confirm the contents of the JDK's jre/lib/security/java.security, specifically the 'security.provider.N' lines?<br>
<br>
<br>
Unless you've deliberately changed something there, it should work. But it's not working... so it can't hurt to check the obvious.<br>
<br>
<br>
<br>
<br>
<br>
<br>
</div>
-- <br>
To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net">
users-unsubscribe@shibboleth.net</a></blockquote>
</div>
<br>
</body>
</html>