On 6/5/13 12:51 PM, "Krug, Jeff" <Jeff.Krug at gtri.gatech.edu> wrote: > >Then if you want ot use SHA-256 intead of SHA-1 with RSA, you would add >the following lines: I think the bug, if it exists, is that for redirect signatures, it may be swapping SHA-1 back in underneath. For XML, I'm sure it's using 256. -- Scott