Upgrade from V2 to V3 - how to change to SHA1

[Brent Putman]

On 7/19/17 3:39 PM, Cantor, Scott wrote:
>
>> Globally changing it back is undoubtedly possible, but I don't think I have ever worked out any particular way to do it.
> If you're asking me to go find out, well, I don't have time right now, and by the time I did Brent would probably be able to come up with a way faster than I could.

I worked out what I believe is the necessary Spring wiring, although
it's difficult for me to test at the moment as I don't have an IdP with
a legacy relying-party.xml config handy.  I did test that it's
well-formed and doesn't blow up the IdP.

It's in the wiki here:

https://wiki.shibboleth.net/confluence/display/IDP30/SecurityConfiguration#SecurityConfiguration-Legacyrelying-party.xmlandglobalsecuritydefaults

If the OP can test and let me know how it goes, that would be helpful.

--Brent

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20170726/256f14f6/attachment.html>