Todd, We see similar issue with 5.0.3. Our SP says, assertion cannot be validated.
I've tried to generate signing and encryption keys in different ways but no luck. Here is what I am using (same options for the encryption keys as well): openssl req -new -x509 -sha256 -nodes -newkey rsa:2048 -keyout signing.key -out signing.crt -days 3650 Thanks! On Thursday, February 2, 2017 at 6:51:58 PM UTC-5, Todd Pratt wrote: > > I found the issue was in the SamlObjectEncrypter class. The resolveSingle > method call didn't find my encryption certificate that I have defined in my > metadata file. The signing part works so I'm not sure if there is an issue > with my metadata file or the code. If I hardcode it to return my public > cert from my keystore the encryption all works correctly. > > https://github.com/ap > <https://github.com/apereo/cas/blob/6f30a825e9fb3dbc3fc75e794e17373746edb48a/support/cas-server-support-saml-idp/src/main/java/org/apereo/cas/support/saml/web/idp/profile/builders/enc/SamlObjectEncrypter.java#L227> > ereo/cas/blob/6f30a825e9fb3dbc3fc75e794e17373746edb48a/support/cas-server-support-saml-idp/src/main/java/org/apereo/cas/support/saml/web/idp/profile/builders/enc/SamlObjectEncrypter.java#L227 > > <https://github.com/apereo/cas/blob/6f30a825e9fb3dbc3fc75e794e17373746edb48a/support/cas-server-support-saml-idp/src/main/java/org/apereo/cas/support/saml/web/idp/profile/builders/enc/SamlObjectEncrypter.java#L227> > > On Tue, Jan 17, 2017 at 9:31 PM, Todd Pratt <[email protected] > <javascript:>> wrote: > >> Thank you, I will look at the code and submit an issue if I find anything. >> >> -- >> - CAS gitter chatroom: https://gitter.im/apereo/cas >> - CAS mailing list guidelines: >> https://apereo.github.io/cas/Mailing-Lists.html >> - CAS documentation website: https://apereo.github.io/cas >> - CAS project website: https://github.com/apereo/cas >> --- >> You received this message because you are subscribed to a topic in the >> Google Groups "CAS Community" group. >> To unsubscribe from this topic, visit >> https://groups.google.com/a/apereo.org/d/topic/cas-user/7wXXm3xE-X4/unsubscribe >> . >> To unsubscribe from this group and all its topics, send an email to >> [email protected] <javascript:>. >> To view this discussion on the web visit >> https://groups.google.com/a/apereo.org/d/msgid/cas-user/b6f07ceb-0f27-4d33-b9e7-934aa95ef90e%40apereo.org >> . >> > > -- - CAS gitter chatroom: https://gitter.im/apereo/cas - CAS mailing list guidelines: https://apereo.github.io/cas/Mailing-Lists.html - CAS documentation website: https://apereo.github.io/cas - CAS project website: https://github.com/apereo/cas --- You received this message because you are subscribed to the Google Groups "CAS Community" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/c08fbc4a-d8c3-49da-95d1-4e7dd15fc0e2%40apereo.org.
