How to set Signature 'DigestMethod' algorithm using OpenSAML

[Dulanja Liyanage]

On Thu, Jul 9, 2015 at 7:45 PM, Cantor, Scott <cantor.2 at osu.edu> wrote:

> On 7/9/15, 2:23 AM, "dev on behalf of Dulanja Liyanage" <
> dev-bounces at shibboleth.net on behalf of dulanja.liyanage at gmail.com> wrote:
>
> >
> >I'm trying to find a way to set the DigestMethod algorithm like that. The
> only way to do that seems to be :
>
> You're not meant to set the signature algorithm like that either, but if
> you were operating at that low a level, I think you can control the
> DigestMethod by directly accessing the ContentReference in the Signature.
>

Thanks for pointing the right direction Scott. I did accordingly to [1] and
it worked. Wonder how I missed that thread.

[1]
https://lists.internet2.edu/sympa/arc/mace-opensaml-users/2007-10/msg00003.html


>
> >However, that's a global configuration. In my application we bootstrap
> OpenSAML only once and then used by different threads with different
> configurations - like different signature algorithms. Is there a way to do
> this in a thread-safe manner like the Signature Algorithm?
>
> The best answer is to stop reimplementing Shibboleth. The second best
> answer is that you would have to copy the kinds of things Shibboleth does
> by using the parameter "resolvers" that take multiple levels of
> SignatureSigningConfiguration objects and merge them together.
>
> -- Scott
>
> --
> To unsubscribe from this list send an email to
> dev-unsubscribe at shibboleth.net
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/dev/attachments/20150710/b33b9619/attachment-0001.html>