idp properties - sha1

coupons at sccoast.net coupons at sccoast.net
Fri May 30 19:23:16 UTC 2025


Setting up a new Shib 5.x IdP, we have ancient metadata with 
signing/encryption certs created in SHA-1 format. To make the new Shib 
5.x work with metadata containing SHA-1 certs would the only change be 
in the idp.properties file with these two parameters?

The certs are going to be updated to SHA256 but for now...

#idp.signing.config = shibboleth.SigningConfiguration.SHA256
idp.signing.config = shibboleth.SigningConfiguration.SHA1

#idp.encryption.config=shibboleth.EncryptionConfiguration.GCM
idp.encryption.config=shibboleth.SecurityConfiguration.SHA1


- Dave
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20250530/b0b7a384/attachment.htm>


More information about the users mailing list