Shibboleth Developers

[Chad La Joie <>]

It's not necessary to install BC at the JDK level.  We use some methods
in the library for reading in keys/certs but don't require the provider
itself.  Indeed, I don't remember ever requiring it for v2.

That said, if you really need it for some reason, what if you try the
version that actually ships with the IdP?

On 5/17/11 6:58 PM, Tom Poage wrote:
> My previous JDK had the JCE unlimited strength policy jars and
> BouncyCastle JCE provider (bcprov-jdk16-146.jar) installed for a
> previous IdP version.
> 
> - Reinstalled a fresh 1.6.0_25. IdP 2.3 installed OK.
> 
> - Reinstalled JCE unlimited strength policy jars. IdP 2.3 installed OK.
> 
> - Reinstalled BC Provider (above). IdP install fails.
> 
> - Backed out JCE unlimited strength policy jars. IdP install fails.
> 
> - Replaced bcprov-jdk16-146.jar with bcprov-ext-jdk16-146.jar. IdP
> install fails.
> 
> - Replaced BC provider with bcprov-jdk15-146.jar. IdP install fails.
> 
> Guess the take home is don't install the BC provider until after the IdP
> is installed and/or remove it before an IdP upgrade?
> 
> Tom.
> 
> 
> On 05/17/2011 03:32 PM, Tom Poage wrote:
>> Looks like it's my java. Installs OK with the OS-supplied Java 6:
>>
>>> $ sudo yum list 'java-1.6.0-sun*'
>>> Loaded plugins: rhnplugin
>>> Installed Packages
>>> java-1.6.0-sun.x86_64        1:1.6.0.24-1jpp.1.el6 
>>> @rhel-x86_64-server-supplementary-6
>>> java-1.6.0-sun-devel.x86_64  1:1.6.0.24-1jpp.1.el6 
>>> @rhel-x86_64-server-supplementary-6
>>> java-1.6.0-sun-jdbc.x86_64   1:1.6.0.24-1jpp.1.el6 
>>> @rhel-x86_64-server-supplementary-6
>> ...
>>
>> On 05/17/2011 03:28 PM, Tom Poage wrote:
>>> Any idea what I'm doing wrong? (I'm no ant expert).
>>>
>>> RHEL 6 (x86_64)
>>>
>>>> Created dir: /opt/shibboleth-idp/war
>>>> Generating signing and encryption key, certificate, and keystore. 
>>>>
>>>> BUILD FAILED
>>>> java.lang.NoSuchFieldError: SubjectAlternativeName
>>>>    at 
>>>> edu.internet2.middleware.ant.pki.SelfSignedCertificate.generateCertificate(SelfSignedCertificate.java:297)
>>>>    at 
>>>> edu.internet2.middleware.ant.pki.SelfSignedCertificate.execute(SelfSignedCertificate.java:102)
>>>>    at 
>>>> org.apache.tools.ant.UnknownElement.execute(UnknownElement.java:288)
>>>>    at sun.reflect.GeneratedMethodAccessor1.invoke(Unknown Source)
>>>>    at 
>>>> sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
>>>
>>>> $ java -version
>>>> java version "1.6.0_25"
>>>> Java(TM) SE Runtime Environment (build 1.6.0_25-b06)
>>>> Java HotSpot(TM) 64-Bit Server VM (build 20.0-b11, mixed mode)
>>>
>>> w/ bcprov-jdk16-146.jar
>>>
>>> Thanks.
>>> Tom.
>>
> 
> 

-- 
Chad La Joie
http://itumi.biz
trusted identities, delivered