<html>
<head>
<meta content="text/html; charset=UTF-8" http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<p><br>
</p>
<br>
<div class="moz-cite-prefix">On 7/6/16 4:29 PM, <a class="moz-txt-link-abbreviated" href="mailto:Eric_Ochlak@Dell.com">Eric_Ochlak@Dell.com</a>
wrote:<br>
</div>
<blockquote cite="mid:1467836950065.7071@Dell.com" type="cite">
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
<style type="text/css" style="display:none"><!-- p { margin-top: 0px; margin-bottom: 0px; }--></style>
<p><br>
</p>
<div style="font-family:Calibri,Arial,Helvetica,sans-serif;
font-size:16px; margin-top:0px; margin-bottom:0px">
Hello.<br>
</div>
<br>
<div style="font-family:Calibri,Arial,Helvetica,sans-serif;
font-size:16px">2016-07-06 15:59:32,240 - WARN
[org.opensaml.saml.saml2.profile.impl.EncryptAssertions:140] -
Profile Action EncryptAssertions: Error encrypting assertion</div>
<div style="font-family:Calibri,Arial,Helvetica,sans-serif;
font-size:16px">org.opensaml.xmlsec.encryption.support.EncryptionException:
Error encrypting XMLObject</div>
<div style="font-family:Calibri,Arial,Helvetica,sans-serif;
font-size:16px">at
org.opensaml.xmlsec.encryption.support.Encrypter.encryptElement(Encrypter.java:543)</div>
<div style="font-family:Calibri,Arial,Helvetica,sans-serif;
font-size:16px">Caused by:
java.security.InvalidAlgorithmParameterException: unknown
parameter type.</div>
<div style="font-family:Calibri,Arial,Helvetica,sans-serif;
font-size:16px">at
org.bouncycastle.jce.provider.JCEBlockCipher.engineInit(Unknown
Source)</div>
<div style="font-family:Calibri,Arial,Helvetica,sans-serif;
font-size:16px"><br>
</div>
</blockquote>
<br>
Just a stab in the dark but: If your BC version is <= 1.50 and
if it's trying to do XML encryption with AES in GCM mode, then you
can try setting this system property:
org.apache.xml.security.cipher.gcm.useIvParameterSpec=true<br>
<br>
That's because BC <= 1.50 doesn't support the new
javax.crypto.spec.GCMParameterSpec that exists in Java 7+ (which is
otherwise found reflectively), and instead requires use of the older
javax.crypto.spec.IvParameterSpec.IvParameterSpec.<br>
<br>
<br>
<br>
<br>
</body>
</html>