<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
pre
{mso-style-priority:99;
mso-style-link:"HTML Preformatted Char";
margin:0in;
margin-bottom:.0001pt;
font-size:10.0pt;
font-family:"Courier New";}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri",sans-serif;
color:windowtext;}
span.HTMLPreformattedChar
{mso-style-name:"HTML Preformatted Char";
mso-style-priority:99;
mso-style-link:"HTML Preformatted";
font-family:"Courier New";}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri",sans-serif;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="#0563C1" vlink="#954F72">
<div class="WordSection1">
<p class="MsoNormal">Hi all, <o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">I’ve been getting a few of the signature verification errors (example below) lately and was wondering if anyone could provide insight about this error. I’m using Java 8 version 91. I did some research on the error and see a forum back in
2013 but at that provided some thoughts on what it may be from (exception when SP has multiple certs that have different lengths) but at the time was determined a bug that was fixed shortly after. Link to forum:
<a href="http://shibboleth.1660669.n2.nabble.com/Signature-verification-exception-on-Java-7-td7584343.html">
http://shibboleth.1660669.n2.nabble.com/Signature-verification-exception-on-Java-7-td7584343.html</a>.
<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<pre style="word-break:break-all"><span style="font-size:11.0pt;color:#333333">2018-09-13 18:57:48,254 - ERROR [org.opensaml.security.crypto.SigningUtil:219] - Error during signature verification<o:p></o:p></span></pre>
<pre style="word-break:break-all"><span style="font-size:11.0pt;color:#333333">java.security.SignatureException: Signature length not correct: got 223 but was expecting 256<o:p></o:p></span></pre>
<p class="MsoNormal"><span style="font-family:"Courier New";color:#333333"> at sun.security.rsa.RSASignature.engineVerify(RSASignature.java:189</span><span style="font-family:"Courier New""><o:p></o:p></span></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Thanks ahead for all your help and guidance. <o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Brent <o:p></o:p></p>
</div>
</body>
</html>