<html><head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body>
Hello,<br>
<br>
We're currently running IdP v4.2.1 (directly updated from v3.4.8) on
CentOS 7 with OpenJDK 11 and Tomcat 9.0.62 in our dev environment
without any issues.<br>
<br>
After we installed the OIDC plugins, generated the keys, and updated
the various property files, as indicated at <a moz-do-not-send="true" href="https://shibboleth.atlassian.net/wiki/spaces/IDPPLUGINS/pages/1376878976/OIDC+OP" class="moz-txt-link-freetext">https://shibboleth.atlassian.net/wiki/spaces/IDPPLUGINS/pages/1376878976/OIDC+OP</a>,
we are noticing the following errors during IdP startup:<br>
<br>
<font face="monospace">WARN
[net.shibboleth.ext.spring.context.FilesystemGenericApplicationContext:591]
- - Exception encountered during context initialization -
cancelling refresh attempt:
org.springframework.beans.factory.BeanDefinitionStoreException:
Invalid bean definition with name
'shibboleth.oidc.DefaultRSSigningCredential' defined in file
[/opt/shibboleth-idp/conf/oidc-credentials.xml]: Could not resolve
parent bean definition 'shibboleth.JWKCredential'; nested
exception is
org.springframework.beans.factory.NoSuchBeanDefinitionException:
No bean named 'shibboleth.JWKCredential' available<br>
<br>
ERROR
[net.shibboleth.utilities.java.support.service.AbstractReloadableService:182]
- - Service 'shibboleth.RelyingPartyResolverService': Initial
load failed<br>
net.shibboleth.utilities.java.support.service.ServiceException:
org.springframework.beans.factory.BeanDefinitionStoreException:
Invalid bean definition with name
'shibboleth.oidc.DefaultRSSigningCredential' defined in file
[/opt/shibboleth-idp/conf/oidc-credentials.xml]: Could not resolve
parent bean definition 'shibboleth.JWKCredential'; nested
exception is
org.springframework.beans.factory.NoSuchBeanDefinitionException:
No bean named 'shibboleth.JWKCredential' available<br>
at
net.shibboleth.ext.spring.service.ReloadableSpringService.doReload(ReloadableSpringService.java:377)<br>
Caused by:
org.springframework.beans.factory.BeanDefinitionStoreException:
Invalid bean definition with name
'shibboleth.oidc.DefaultRSSigningCredential' defined in file
[/opt/shibboleth-idp/conf/oidc-credentials.xml]: Could not resolve
parent bean definition 'shibboleth.JWKCredential'; nested
exception is
org.springframework.beans.factory.NoSuchBeanDefinitionException:
No bean named 'shibboleth.JWKCredential' available<br>
at
org.springframework.beans.factory.support.AbstractBeanFactory.getMergedBeanDefinition(AbstractBeanFactory.java:1417)<br>
Caused by:
org.springframework.beans.factory.NoSuchBeanDefinitionException:
No bean named 'shibboleth.JWKCredential' available<br>
at
org.springframework.beans.factory.support.DefaultListableBeanFactory.getBeanDefinition(DefaultListableBeanFactory.java:872)</font><br>
<br>
<br>
oidc-credentials.xml contains all the correct references to the OIDC
signing key definitions in oidc.properties (which is being read by
idp.properties):<br>
<br>
<font face="monospace"> <bean
id="shibboleth.oidc.DefaultRSSigningCredential"
parent="shibboleth.JWKCredential"<br>
p:resource="%{idp.signing.oidc.rs.key}" /><br>
<br>
<bean id="shibboleth.oidc.DefaultESSigningCredential"
parent="shibboleth.JWKCredential"<br>
p:resource="%{idp.signing.oidc.es.key}" /><br>
<br>
<bean id="shibboleth.oidc.DefaultRSAEncryptionCredential"
parent="shibboleth.JWKCredential"<br>
p:resource="%{idp.signing.oidc.rsa.enc.key}" /></font><br>
<br>
<div class="moz-signature"><br>
Any thoughts as to what could be causing this
"shibboleth.JWKCredential" invalid bean definition? Thanks in
advance.<br>
<br>
<br>
-Gabor<br>
<br>
</div>
</body>
</html>