[JIRA] Commented: (XSTJ-14) Feature to Allow User to Specify Digest and Signature Algorithm to use when signing metadata

[Ian Young (JIRA)]

    [ https://issues.shibboleth.net/jira/browse/XSTJ-14?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14242#comment-14242 ] 

Ian Young commented on XSTJ-14:
-------------------------------

The aggregator XMLSignatureSigningStage stage has some code we should be able to repurpose for this under the assumption that we want to gang the selection of both digest algorithms together (which I think is reasonable).

That code defaults to SHA-256.  I'm not necessarily suggesting that we should do that for xmlsectool, as I haven't quantified which likely consumers of signed metadata wouldn't be able to process that (if any).

> Feature to Allow User to Specify Digest and Signature Algorithm to use when signing metadata
> --------------------------------------------------------------------------------------------
>
>                 Key: XSTJ-14
>                 URL: https://issues.shibboleth.net/jira/browse/XSTJ-14
>             Project: XML Security Tool - Java
>          Issue Type: New Feature
>    Affects Versions: 1.1.3
>            Reporter: gtkrug at idp.protectnetwork.org
>            Assignee: Ian Young
>
> We have a new requirement to sign SAML 2 Metadata files with RSA-256+ and digest method SHA-224+.  The URIs are from RFC 4051, and it seems that opensaml supports these algorithms, but there does not seem to be a way to specify to the xmlsectool to use these algorithms.

--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira