Replace sha1 by sha256

MOTTE Frederic frederic.motte at thalesgroup.com
Tue May 29 13:04:58 BST 2012


Hi, 

I need to replace the algorithm for the encryption and the signature of the assertion (SHA1 (default mode) to SHA256). 
I find some information on the wiki https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPRelyingParty but an not sure about the impact.
If I replace signingAlg with RSA-SHA256, digestAlg with SHA256 and encryptionAlg with RSA-SHA256 on the SP relyingParty, the IdP will signed and encrypted the assertion with the new algorithm, right?

Best regards 

Frederic


More information about the users mailing list