idp properties - sha1

[Cantor, Scott]

> To make the new Shib 5.x work with metadata containing SHA-1
> certs would the only change be in the idp.properties file with
> these two parameters?

Those properties have nothing whatsoever to do with how certificates are issued, nor are they documented as such. They control (in a convenience sort of way) the digest algorithm used in XML when signing. That has nothing to do with any certificate.

Java has some restrictions by default on certificate handling, but I don't know exactly how they impact the IdP offhand anymore.

-- Scott