Uploaded image for project: 'OpenAM'
  1. OpenAM
  2. OPENAM-8387

OpenAM should provide more detailed log messages when KeyUtil.getDecryptionKey does not find the requested key

    Details

    • Type: Improvement
    • Status: Resolved
    • Priority: Major
    • Resolution: Fixed
    • Affects Version/s: 11.0.1, 11.0.2, 11.0.3, 12.0.0, 12.0.1, 12.0.2, 13.0.0, 13.5.0
    • Fix Version/s: 13.5.0
    • Component/s: SAML
    • Labels:
    • Environment:
      OpenAM acting as the SP where the IDP has Assertion encryption enabled.
    • Sprint:
      AM Sustaining Sprint 18, AM Sustaining Sprint 19, AM Sustaining Sprint 20
    • Support Ticket IDs:

      Description

      Example case where the Encryption aliases is missing from the SP configuration which results in a SAML2Exception since the lookup fails but no details of what key was not found is logged:

      ERROR: spAssertionConsumer.jsp: SSO failed. 
      com.sun.identity.saml2.common.SAML2Exception: Null input. 
      at com.sun.identity.saml2.xmlenc.FMEncProvider.decrypt(FMEncProvider.java:552) 
      at com.sun.identity.saml2.assertion.impl.EncryptedAssertionImpl.decrypt(EncryptedAssertionImpl.java:123) 
      at com.sun.identity.saml2.common.SAML2Utils.verifyResponse(SAML2Utils.java:528) 
      at com.sun.identity.saml2.profile.SPACSUtils.processResponse(SPACSUtils.java:1055) 
      at org.apache.jsp.saml2.jsp.spAssertionConsumer_jsp._jspService(spAssertionConsumer_jsp.java:234) 
      

        Attachments

          Activity

            People

            • Assignee:
              markdr Mark de Reeper
              Reporter:
              markdr Mark de Reeper
            • Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved:

                Time Tracking

                Estimated:
                Original Estimate - 8h
                8h
                Remaining:
                Remaining Estimate - 0h
                0h
                Logged:
                Time Spent - 8h
                8h