Shibboleth Developers

[Tom Poage <>]

On 05/17/2011 04:22 PM, Chad La Joie wrote:
> It's not necessary to install BC at the JDK level.  We use some methods
> in the library for reading in keys/certs but don't require the provider
> itself.  Indeed, I don't remember ever requiring it for v2.

I had interpreted instructions on this page to mean install it into the JVM:

https://wiki.shibboleth.net/confluence/display/SHIB2/IdPProdJVMTuning

I'll have to go retest some things, but recall something about needing
BC installed to get the DataSealer to work properly. Hmm, maybe it was
the unlimited strength policy jars.

> That said, if you really need it for some reason, what if you try the
> version that actually ships with the IdP?

Same error, but if it's not necessary to install the BC provider into
the JVM, then there's no reason to pursue it and I'll back it out.

As I find time, I'll see if there's any difference on RHEL 5 (this was
RHEL 6).

Thanks.
Tom.