Signature Reference Algorithm

[Massimiliano Masi]

Hi All, 

In OpenSAMLv2, the Signature Reference Digest Algorithm was set using 

  if ( referenceDigestAlgorithm!=null ) 
        {
        	BasicSecurityConfiguration config = (BasicSecurityConfiguration) Configuration.getGlobalSecurityConfiguration();
            config.setSignatureReferenceDigestMethod(this.referenceDigestAlgorithm);
        }

While checking the source code of org.opensaml.xmlsec, I found these two ways

        if ( referenceDigestAlgorithm!=null ) 
        {
//            SignatureSigningParameters ssp = new SignatureSigningParameters();
//            ssp.setSignatureReferenceDigestMethod(referenceDigestAlgorithm);
            BasicSignatureSigningConfiguration config = (BasicSignatureSigningConfiguration) DefaultSecurityConfigurationBootstrap.buildDefaultSignatureSigningConfiguration();
            LinkedList<String> signatureReferenceDigestMethod = new LinkedList<>();
            signatureReferenceDigestMethod.add(this.referenceDigestAlgorithm);
            config.setSignatureReferenceDigestMethods(signatureReferenceDigestMethod);
        }

Which one is the suggested way to set the reference digest algorithm? The commented one (through the SignatureSigningParameters) or through the BasicSignatureSigningConfiguration?

Thanks, 

	Massi

> Il giorno 04 mag 2017, alle ore 17:41, Cantor, Scott <cantor.2 at osu.edu> ha scritto:
> 
>> What about the Core  Spec Validator? Is it still available? In v2 I had this nice
>> method (that saved me a lot of time).
> 
> All the validators are gone, the entire interface was removed.
> 
> -- Scott
> 
> -- 
> To unsubscribe from this list send an email to dev-unsubscribe at shibboleth.net

--
Anger is a gift, http://www.mascanc.net/

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/dev/attachments/20170508/7799cdfc/attachment.html>