SP metadata that supports both sha1 and sha2?

[Liam Hoekenga]

>We have a vendor who wants to set their metadata up to support both their
>sha1 and sha2 hashing.
>
> That's not a function of metadata, so they're confused.

I guess I'm confused too.

>> Can it contain multiple signature algorithms?
>
> It doesn't contain any, not for the signer anyway.

Then what's this stuff?

        <ds:SignedInfo>
            <ds:CanonicalizationMethod Algorithm="
http://www.w3.org/2001/10/xml-exc-c14n#"/>
            <ds:SignatureMethod Algorithm="
http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/>
            <ds:Reference URI="#BWECV5asjkQuYobLAI6P5nzg6Gs">
                <ds:Transforms>
                    <ds:Transform Algorithm="
http://www.w3.org/2000/09/xmldsig#enveloped-signature"/>
                    <ds:Transform Algorithm="
http://www.w3.org/2001/10/xml-exc-c14n#"/>
                </ds:Transforms>
                <ds:DigestMethod Algorithm="
http://www.w3.org/2001/04/xmlenc#sha256"/>

<ds:DigestValue>Vc2rDL5mk1+e+E7TUKiAv7PgJsai6c9u0MQVjkkhkFb=</ds:DigestValue>
            </ds:Reference>
        </ds:SignedInfo>

Liam


On Wed, Jun 25, 2014 at 11:57 AM, Cantor, Scott <cantor.2 at osu.edu> wrote:

> On 6/25/14, 11:22 AM, "Liam Hoekenga" <liamr at umich.edu> wrote:
>
> >We have a vendor who wants to set their metadata up to support both their
> >sha1 and sha2 hashing.
>
> That's not a function of metadata, so they're confused.
>
> >Can it contain multiple signature algorithms?
>
> It doesn't contain any, not for the signer anyay.
>
> -- Scott
>
>
> --
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20140625/1f3322d5/attachment.html