SP expecting SHA1 or SHA256 algorithm but Shibboleth IDP responding with SHA 512.

[Muthuraman Sethuraman Sethuraman (US - Advisory)]

>From the documentation, i found where to configure.

${idp.home}/conf/idp.properties
# To default to SHA-1, set to shibboleth.SigningConfiguration.SHA1
idp.signing.config = shibboleth.SigningConfiguration.SHA1

And restarted the server.
But even after this configuration change, i still see the saml response
being signed with sha512 algorithm and its evident from the
idp-process.log. Is this a configuration issue or a bug?

I request to throw some light on this.

----------
 <ds:Signature
                xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
<ds:SignedInfo>
<ds:CanonicalizationMethod
                Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
<ds:SignatureMethod
                Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha512
"/>
<ds:Reference
                        URI="#_99173909f4f9a1346ce82b1703e81cbc">
<ds:Transforms>
<ds:Transform
                        Algorithm="
http://www.w3.org/2000/09/xmldsig#enveloped-signature"/>
<ds:Transform
                    Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
</ds:Transforms>
<ds:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha512"/>

-----

On Wed, Jul 13, 2016 at 12:02 PM, Muthuraman Sethuraman Sethuraman (US -
Advisory) <muthuraman.sethuraman at pwc.com> wrote:

> Netscaler SP is not supporting SHA512 algorithms yet.
>
>
>
> In the IDP SAML response, i ccould see this entry
>
> Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha512
>
>
>
> Is there a way i can configure Shibboleth IDP 3.2.1 to use sha256
> algorithm to sign the response.
>
>
> --
> *Muthuraman S*
> PwC | SDC Manager | IdAM
> Office: +1 404-838-4445 | Mobile: +91-9886302072
> Email: muthuraman.sethuraman at pwc.com
> PricewaterhouseCoopers LLP
> EGL Business Park, Bengaluru, India
> http://www.pwc.com/us
>



-- 
*Muthuraman S*
PwC | SDC Manager | IdAM
Office: +1 404-838-4445 | Mobile: +91-9886302072
Email: muthuraman.sethuraman at pwc.com
PricewaterhouseCoopers LLP
EGL Business Park, Bengaluru, India
http://www.pwc.com/us

______________________________________________________________________
The information transmitted, including any attachments, is intended only for the person or entity to which it is addressed and may contain confidential and/or privileged material. Any review, retransmission, dissemination or other use of, or taking of any action in reliance upon, this information by persons or entities other than the intended recipient is prohibited, and all liability arising therefrom is disclaimed. If you received this in error, please contact the sender and delete the material from any computer. PricewaterhouseCoopers LLP is a Delaware limited liability partnership.  This communication may come from PricewaterhouseCoopers LLP or one of its subsidiaries.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20160713/4320a9b2/attachment.html>