[java-identity-provider] branch master updated: IDP-1526 - Changes to profile and algorithm defaults

[Scott Cantor]

This is an automated email from the git hooks/post-receive script.

scantor pushed a commit to branch master
in repository java-identity-provider.

View the commit online:
http://git.shibboleth.net/view/?p=java-identity-provider.git;a=commit;h=4a6f3de1c9bc2cff430e25a6a0e11cf3a95f2429

The following commit(s) were added to refs/heads/master by this push:
       new  4a6f3de   IDP-1526 - Changes to profile and algorithm defaults
4a6f3de is described below

commit 4a6f3de1c9bc2cff430e25a6a0e11cf3a95f2429
Author: Scott Cantor <cantor.2 at osu.edu>
AuthorDate: Fri Feb 21 11:16:13 2020 -0500

    IDP-1526 - Changes to profile and algorithm defaults
    
    https://issues.shibboleth.net/jira/browse/IDP-1526
    
    Change encryption default to AES-GCM.
---
 idp-conf/src/main/resources/conf/idp.properties | 5 ++---
 1 file changed, 2 insertions(+), 3 deletions(-)

diff --git a/idp-conf/src/main/resources/conf/idp.properties b/idp-conf/src/main/resources/conf/idp.properties
index e00597b..8064867 100644
--- a/idp-conf/src/main/resources/conf/idp.properties
+++ b/idp-conf/src/main/resources/conf/idp.properties
@@ -69,9 +69,8 @@ idp.encryption.cert = %{idp.home}/credentials/idp-encryption.crt
 # To downgrade to SHA-1, set to shibboleth.SigningConfiguration.SHA1
 #idp.signing.config = shibboleth.SigningConfiguration.SHA256
 
-# To upgrade to AES-GCM encryption, set to shibboleth.EncryptionConfiguration.GCM
-# This is unlikely to work for all SPs, but this is a quick way to test them.
-#idp.encryption.config = shibboleth.EncryptionConfiguration.CBC
+# The new install default for encryption is now AES-GCM.
+idp.encryption.config = shibboleth.EncryptionConfiguration.GCM
 
 # Configures trust evaluation of keys used by services at runtime
 # Internal default is Chaining, overriden for new installs

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.