SP expecting SHA1 or SHA256 algorithm but Shibboleth IDP responding with SHA 512.

[Muthuraman Sethuraman Sethuraman (US - Advisory)]

Hello Brent,

As you rightly pointed out, it was the issue with the SP metadata which has
overridden the IDP to use SHA512 alg.
After changing them in the SP metadata, the SAML handshake works perfect
now.

Thanks a lot,
Muthu


On Wed, Jul 13, 2016 at 1:20 PM, Brent Putman <putmanb at georgetown.edu>
wrote:

>
>
> On 7/13/16 3:14 AM, Muthuraman Sethuraman Sethuraman (US - Advisory) wrote:
>
> From the documentation, i found where to configure.
>
> ${idp.home}/conf/idp.properties
> # To default to SHA-1, set to shibboleth.SigningConfiguration.SHA1
> idp.signing.config = shibboleth.SigningConfiguration.SHA1
>
> And restarted the server.
> But even after this configuration change, i still see the saml response
> being signed with sha512 algorithm and its evident from the
> idp-process.log. Is this a configuration issue or a bug?
>
>
> Assuming you did all that correctly, that's further evidence that the
> algorithm selection is being driven by the SP's metadata.
>
>
>
> --
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>

______________________________________________________________________
The information transmitted, including any attachments, is intended only for the person or entity to which it is addressed and may contain confidential and/or privileged material. Any review, retransmission, dissemination or other use of, or taking of any action in reliance upon, this information by persons or entities other than the intended recipient is prohibited, and all liability arising therefrom is disclaimed. If you received this in error, please contact the sender and delete the material from any computer. PricewaterhouseCoopers LLP is a Delaware limited liability partnership.  This communication may come from PricewaterhouseCoopers LLP or one of its subsidiaries.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20160713/28f8afa9/attachment.html>