Skip to Content.
Sympa Menu

shibboleth-dev - Shib 2 IdP, problem encrypting assertion

Subject: Shibboleth Developers

List archive

Shib 2 IdP, problem encrypting assertion


Chronological Thread 
  • From:
  • To:
  • Subject: Shib 2 IdP, problem encrypting assertion
  • Date: Tue, 4 Dec 2007 21:52:03 -0500

Log file available here:

http://stc-test11.cis.brown.edu/idp-process.log

Metadata available here:

http://stc-test11.cis.brown.edu/testshib-metadata-test11.xml

The msg is:

Error encrypting XMLObject

org.apache.xml.security.encryption.XMLEncryptionException: Illegal key size or default parameters

(The log file is logging both the IdP and OpenSAML at DEBUG. There's also a null pointer exception in the file; I provide info about that tomorrow.)

Suggestions about what I did wrong?

Here's the matching element from relying-party.xml:

<!-- stc -->
<RelyingParty id="urn:mace:shibboleth:testshib"

provider="https://stc-test11.cis.brown.edu/idp/profile/saml/metadata";
defaultSigningCredentialRef="TestShib">
<ProfileConfiguration xsi:type="saml:ShibbolethSSOProfile" />
<ProfileConfiguration xsi:type="saml:SAML1AttributeQueryProfile" />
<ProfileConfiguration xsi:type="saml:SAML1ArtifactResolutionProfile"
/>

<!-- stc added encryptAssertion -->
<ProfileConfiguration xsi:type="saml:SAML2SSOProfile" encryptAssertions="true" />
<ProfileConfiguration xsi:type="saml:SAML2AttributeQueryProfile" />
<ProfileConfiguration xsi:type="saml:SAML2ArtifactResolutionProfile"
/>
</RelyingParty>




Archive powered by MHonArc 2.6.16.

Top of Page