Signing Assertion with SHA256

[Yang, Gang CTR (US)]

Any one happen to know where SHA256 was defined? Within OpenAM libraries or ourside?

I also observed, after changing the reference digest method, that the algorithm for the <DigestMethod> of <EncryptionMethod> in encrypted assertion is also still using SHA1. So another place that need changes. What's the right way to change the digest method across the board in OpenSAML?

Any help is greatly appreciated.

Gang
________________________________________
From: dev-bounces at shibboleth.net [dev-bounces at shibboleth.net] on behalf of Cantor, Scott [cantor.2 at osu.edu]
Sent: Monday, January 13, 2014 2:05 PM
To: Shib Dev
Subject: Re: Signing Assertion with SHA256

On 1/13/14, 2:00 PM, "Yang, Gang CTR (US)" <gang.yang.ctr at mail.mil> wrote:

>Brent,
>
>Thanks for the reply. I followed your pointer to make code changes and it
>worked. But what's interesting is that OpenAM seems not have defined the
>constant for SHA256 digest method. I could only find
>SignatureConstants.ALGO_ID_DIGEST_SHA384 and
>SignatureConstants.ALGO_ID_DIGEST_SHA1. I wonder if SHA256 is actually
>supported. What digest method is used for the signature of the SignedInfo
>then?

SHA-256 was defined by XML Encryption, it's defined on a different
constants class.

-- Scott


--
To unsubscribe from this list send an email to dev-unsubscribe at shibboleth.net