<html>
<head>
<meta content="text/html; charset=windows-1252"
http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<br>
<br>
<div class="moz-cite-prefix">On 2/27/15 1:46 PM, Tom Zeller wrote:<br>
</div>
<blockquote
cite="mid:CAMNmQDTdYJyWg1XkLxjqLCOnhfKSebA-uqD+ugVP037wCbUsmA@mail.gmail.com"
type="cite">
<pre wrap="">Is it possible to disable the runtime algorithm checks performed by
the AlgorithmRegistry ?</pre>
</blockquote>
<br>
Not currently, no. And if it were possible then the registry would
by necessity have to either default all algos to runtime unsupported
or supported. The former would mean you basically would not be able
to do anything involving cryptography (which is pretty much anything
involving an actual SAML request/response...). Unless I guess it
special-cased the most basic things that we assume are always
supported in any modern JRE.<br>
<br>
The latter would mean things would either work or not, depending on
what the configuration/metadata looked like - if you effectively
tried to use an algorithm that wasn't supported, things would blow
up.<br>
<br>
<br>
<blockquote
cite="mid:CAMNmQDTdYJyWg1XkLxjqLCOnhfKSebA-uqD+ugVP037wCbUsmA@mail.gmail.com"
type="cite">
<pre wrap="">
For me, it takes ~7s to init OpenSAML, and I'd like to reduce that
during development when I'm bouncing the IdP.</pre>
</blockquote>
<br>
That seems like a long time. I've never noticed that it takes that
long for me, but I'll pay attention the next time I'm running tests
or starting my test IdP.<br>
<br>
<br>
<br>
<blockquote
cite="mid:CAMNmQDTdYJyWg1XkLxjqLCOnhfKSebA-uqD+ugVP037wCbUsmA@mail.gmail.com"
type="cite">
<pre wrap="">
Any other suggestions are welcome.
</pre>
</blockquote>
<br>
I don't have any at the moment, but I'll think on it some more.<br>
</body>
</html>