How to set Signature 'DigestMethod' algorithm using OpenSAML

[Cantor, Scott]

On 7/9/15, 2:23 AM, "dev on behalf of Dulanja Liyanage" <dev-bounces at shibboleth.net on behalf of dulanja.liyanage at gmail.com> wrote:

>
>I'm trying to find a way to set the DigestMethod algorithm like that. The only way to do that seems to be :

You're not meant to set the signature algorithm like that either, but if you were operating at that low a level, I think you can control the DigestMethod by directly accessing the ContentReference in the Signature.

>However, that's a global configuration. In my application we bootstrap OpenSAML only once and then used by different threads with different configurations - like different signature algorithms. Is there a way to do this in a thread-safe manner like the Signature Algorithm?

The best answer is to stop reimplementing Shibboleth. The second best answer is that you would have to copy the kinds of things Shibboleth does by using the parameter "resolvers" that take multiple levels of SignatureSigningConfiguration objects and merge them together.

-- Scott