Signing Assertion with SHA256

[Cantor, Scott]

On 1/10/14, 5:58 PM, "Yang, Gang CTR (US)" <gang.yang.ctr at mail.mil> wrote:
>
>I'm using OpenSAML 2.5.1 and is trying to switch the signing algorithm
>from SignatureConstants.ALGO_ID_SIGNATURE_RSA_SHA1 to
>SignatureConstants.ALGO_ID_SIGNATURE_RSA_SHA256. However in the log, I
>observed that although the Algorithm in the SignagureMethod element is
>rsa-sha256, but the Algorithm in the DigestMethod is still sha1 (see
>below). I was expecting a SHA256 digest. Am I missing something?

Signing and digest algorithms are independently controlled in XML
Signature. The signature is over the SignedInfo element and the references
are independently digested.

-- Scott