<html>
<head>
<meta content="text/html; charset=windows-1252"
http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<p><br>
</p>
<br>
<div class="moz-cite-prefix">On 7/6/16 6:36 PM, Brent Putman wrote:<br>
</div>
<blockquote
cite="mid:08c46743-2700-4d25-98c3-34fe99c1a4b7@georgetown.edu"
type="cite">
<meta content="text/html; charset=windows-1252"
http-equiv="Content-Type">
<p><br>
</p>
<br>
<div class="moz-cite-prefix">On 7/6/16 6:27 PM, Brent Putman
wrote:<br>
</div>
<blockquote
cite="mid:d9776dd0-c738-39cd-3a55-470ef0f8bd69@georgetown.edu"
type="cite">
<meta content="text/html; charset=windows-1252"
http-equiv="Content-Type">
<p><br>
</p>
<br>
<div class="moz-cite-prefix">On 7/6/16 5:40 PM, Cantor, Scott
wrote:<br>
</div>
<blockquote
cite="mid:9846A6064BD102419D06814DD0D78DE11298BFD2@CIO-TNC-D2MBX02.osuad.osu.edu"
type="cite"><br>
<pre wrap="">I don't think we're using GCM by default for XML Encryption though, are we? </pre>
</blockquote>
<br>
Not by default, but it would if the metadata said to via the
algorithm extensions (which I think the Shib SP metadata does by
default IIRC) </blockquote>
<br>
</blockquote>
<br>
And the documented metadata for the TestShib SP does list the GCM
ones first also:<br>
<br>
<a class="moz-txt-link-freetext" href="http://www.testshib.org/metadata/testshib-providers.xml">http://www.testshib.org/metadata/testshib-providers.xml</a><br>
<br>
So since the OP has BC loaded as a security provider, it probably in
fact is trying to do GCM. And if the BC version is <= 1.50 it's
mandatory to set that system property, or else you'll get some error
similar to what he reported. So that's sounding more likely to be
the cause, actually.<br>
</body>
</html>