Commit a5505c9

@@ -34,12 +34,6 @@ module Saml
           Saml::Kit::Response.new(to_xml, request_id: request.id, configuration: configuration)
         end
 
-        private
-
-        def assertion
-          @assertion ||= Saml::Kit::Builders::Assertion.new(self)
-        end
-
         def encryption_certificate
           request.provider.encryption_certificates.first
         rescue => error
@@ -47,6 +41,12 @@ module Saml
           nil
         end
 
+        private
+
+        def assertion
+          @assertion ||= Saml::Kit::Builders::Assertion.new(self)
+        end
+
         def response_options
           {
             ID: id,

@@ -13,7 +13,7 @@ RSpec.describe Saml::Kit::Builders::Response do
   let(:assertion_consumer_service_url) { FFaker::Internet.uri("https") }
   let(:user) { double(:user, name_id_for: SecureRandom.uuid, assertion_attributes_for: { email: email, created_at: Time.now.utc.iso8601 }) }
   let(:request) { double(:request, id: Saml::Kit::Id.generate, assertion_consumer_service_url: assertion_consumer_service_url, issuer: issuer, name_id_format: Saml::Kit::Namespaces::EMAIL_ADDRESS, provider: provider, trusted?: true, signed?: true) }
-  let(:provider) { double(:provider, want_assertions_signed: false, encryption_certificates: [configuration.encryption_certificate] ) }
+  let(:provider) { double(:provider, want_assertions_signed: false, encryption_certificates: [configuration.certificates(use: :encryption).last] ) }
   let(:issuer) { FFaker::Internet.uri("https") }
 
   describe "#build" do

@@ -21,7 +21,7 @@ RSpec.describe Saml::Kit::Signature do
     x.sign(rsa_key, OpenSSL::Digest::SHA256.new)
     x.to_pem
   end
-  let(:private_key) { rsa_key.to_pem(OpenSSL::Cipher::Cipher.new('des3'), password) }
+  let(:private_key) { rsa_key.to_pem(OpenSSL::Cipher.new('des3'), password) }
   let(:password) { "password" }
 
   it 'generates a signature' do