Replace sha1 by sha256

[Cantor, Scott]

On 5/29/12 8:04 AM, "MOTTE Frederic" <frederic.motte at thalesgroup.com>
wrote:
>
>I need to replace the algorithm for the encryption and the signature of
>the assertion (SHA1 (default mode) to SHA256).

V2 doesn't support that, unless you want to make low level source changes.

> 
>I find some information on the wiki
>https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPRelyingParty
>but an not sure about the impact.

That has nothing to do with the IdP's signing operations.

>If I replace signingAlg with RSA-SHA256, digestAlg with SHA256 and
>encryptionAlg with RSA-SHA256 on the SP relyingParty, the IdP will signed
>and encrypted the assertion with the new algorithm, right?

No.

-- Scott