Replace sha1 by sha256

[Brent Putman]

On 5/29/12 10:03 AM, Cantor, Scott wrote:
>
> It's changing a constant. Before you ask, no, I don't knnow where it is.


At least on the IdP: Yes, you can change the source directly and
recompile.  But a less invasive way is to just an additional bean in
internal.xml that changes the configured default algorithm values on the
global SecurityConfiguration object.  Changing up the specifics to what
you want would involve a minimal amount of Java programming, but very
little really.   I did an example of this for someone a few years ago. 
It should be in the list archives.