Shibboleth Developers

[Scott Cantor <>]

 wrote:
> I am trying to test the Shibboleth SP with a different SAML IDP product, 
> and it is not including a copy of the SP’s encryption certificate, and 
> here is the sequence of messages I see in the logfile:
>
> 2008-03-11 17:48:57 DEBUG Shibboleth.SSO.SAML2 [9]: processing message 
> against SAML 2.0 SSO profile
> 2 2008-03-11 17:48:57 DEBUG XMLTooling.KeyInfoResolver.Inline [9]: 
> resolved 0 certificate(s)
> 2008-03-11 17:48:57 ERROR Shibboleth.SSO.SAML2 [9]: Unable to decrypt key.

This is worthless to point out, since obviously it happened, but...looking 
at the code now, that's not possible. ;-)

For that exception to be thrown and logged by that logging category, some 
*other* error has to be thrown and logged before it. Since that's not 
happening, I'm at a loss. If you're testing and can give me the key, I'm 
certainly willing to take the private key and the message and run a test 
case on it.

Alternatively I can test my SP against your IdP.

-- Scott