IdP v2.4.3 using SHA-1 vs. SHA-256

Brent Putman putmanb at georgetown.edu
Thu Jun 11 13:55:08 EDT 2015



On 6/11/15 11:15 AM, Mark K. Miller wrote:
>
> For the Shibboleth IdP v2.4.3 is the latest info regarding use of
> SHA-1 vs. SHA-256 still located here:
>
> https://wiki.shibboleth.net/confluence/display/SHIB2/Changing+IdP+Signature+Method+Algorithm
>
>
> I see the date on that page is 9/9/2013 and IdP v2.4.3 was released
> more than a year later, so I'm just wondering...


It's still correct AFAIK for 2.x.  I don't believe the newer IdP patch
version (2.4.4) has changed anything in this regard.

v3 of course is completely different (and better!).


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20150611/aff1faf7/attachment.html>


More information about the users mailing list