I found the issue was in the SamlObjectEncrypter class. The resolveSingle method call didn't find my encryption certificate that I have defined in my metadata file. The signing part works so I'm not sure if there is an issue with my metadata file or the code. If I hardcode it to return my public cert from my keystore the encryption all works correctly.
https://github.com/ap <https://github.com/apereo/cas/blob/6f30a825e9fb3dbc3fc75e794e17373746edb48a/support/cas-server-support-saml-idp/src/main/java/org/apereo/cas/support/saml/web/idp/profile/builders/enc/SamlObjectEncrypter.java#L227> ereo/cas/blob/6f30a825e9fb3dbc3fc75e794e17373746edb48a/support/cas-server-support-saml-idp/src/main/java/org/apereo/cas/support/saml/web/idp/profile/builders/enc/SamlObjectEncrypter.java#L227 <https://github.com/apereo/cas/blob/6f30a825e9fb3dbc3fc75e794e17373746edb48a/support/cas-server-support-saml-idp/src/main/java/org/apereo/cas/support/saml/web/idp/profile/builders/enc/SamlObjectEncrypter.java#L227> On Tue, Jan 17, 2017 at 9:31 PM, Todd Pratt <[email protected]> wrote: > Thank you, I will look at the code and submit an issue if I find anything. > > -- > - CAS gitter chatroom: https://gitter.im/apereo/cas > - CAS mailing list guidelines: https://apereo.github.io/cas/ > Mailing-Lists.html > - CAS documentation website: https://apereo.github.io/cas > - CAS project website: https://github.com/apereo/cas > --- > You received this message because you are subscribed to a topic in the > Google Groups "CAS Community" group. > To unsubscribe from this topic, visit https://groups.google.com/a/ > apereo.org/d/topic/cas-user/7wXXm3xE-X4/unsubscribe. > To unsubscribe from this group and all its topics, send an email to > [email protected]. > To view this discussion on the web visit https://groups.google.com/a/ > apereo.org/d/msgid/cas-user/b6f07ceb-0f27-4d33-b9e7- > 934aa95ef90e%40apereo.org. > -- - CAS gitter chatroom: https://gitter.im/apereo/cas - CAS mailing list guidelines: https://apereo.github.io/cas/Mailing-Lists.html - CAS documentation website: https://apereo.github.io/cas - CAS project website: https://github.com/apereo/cas --- You received this message because you are subscribed to the Google Groups "CAS Community" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/CAH7Y6jReqgKcHs9D9kq4Q5a2b991d%3D9CKZtYZD-%3DBed-OK9Nhg%40mail.gmail.com.
