SP expecting SHA1 or SHA256 algorithm but Shibboleth IDP responding with SHA 512.

[Muthuraman Sethuraman Sethuraman (US - Advisory)]

Thanks a lot, Brent for your question response.
I will check the netscaler sp metadata, which was prepared by me.
And come back if there are any queries.


-------- Original Message --------
From: Brent Putman <putmanb at georgetown.edu>
Date: Wed 13 Jul, 2016 1:20 pm
To: users at shibboleth.net
Subject: Re: SP expecting SHA1 or SHA256 algorithm but Shibboleth IDP
responding with SHA 512.



On 7/13/16 3:14 AM, Muthuraman Sethuraman Sethuraman (US - Advisory) wrote:

>From the documentation, i found where to configure.

${idp.home}/conf/idp.properties
# To default to SHA-1, set to shibboleth.SigningConfiguration.SHA1
idp.signing.config = shibboleth.SigningConfiguration.SHA1

And restarted the server.
But even after this configuration change, i still see the saml response
being signed with sha512 algorithm and its evident from the
idp-process.log. Is this a configuration issue or a bug?


Assuming you did all that correctly, that's further evidence that the
algorithm selection is being driven by the SP's metadata.

______________________________________________________________________
The information transmitted, including any attachments, is intended only for the person or entity to which it is addressed and may contain confidential and/or privileged material. Any review, retransmission, dissemination or other use of, or taking of any action in reliance upon, this information by persons or entities other than the intended recipient is prohibited, and all liability arising therefrom is disclaimed. If you received this in error, please contact the sender and delete the material from any computer. PricewaterhouseCoopers LLP is a Delaware limited liability partnership.  This communication may come from PricewaterhouseCoopers LLP or one of its subsidiaries.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20160713/9849fbe3/attachment.html>
-------------- next part --------------
-- 
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net