<div dir="ltr"><div>correcting typo.</div><div><br></div><div>"deemed work" was meant to read "deemed weak" by the way.</div><div><br></div><div>cheers</div><div><br></div><div>M</div></div><div class="gmail_extra">
<br><br><div class="gmail_quote">On 25 July 2014 13:14, Matheesha Weerasinghe <span dir="ltr"><<a href="mailto:matheesha@gmail.com" target="_blank">matheesha@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div dir="ltr"><div>Hi guys</div><div><br></div><div>I want to do a quick test against AD FS by getting a Shibboleth SP to send a signed authnrequest with a signature using the sigalg <a href="http://www.w3.org/2000/09/xmldsig#dsa-sha1" target="_blank">http://www.w3.org/2000/09/xmldsig#dsa-sha1</a>.</div>
<div><br></div><div>I've tested as per <a href="https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPRelyingParty" target="_blank">https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPRelyingParty</a> by adding a <font face="Courier New">signingAlg</font> ="<a href="http://www.w3.org/2000/09/xmldsig#dsa-sha1" target="_blank">http://www.w3.org/2000/09/xmldsig#dsa-sha1</a>" in the <relyingparty> and <ApplicationOverride> elements. This however now doesn't send a signed request at all. I just have signing="true" in both of them.</div>
<div><br></div><div>But if I change it to <a href="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256" target="_blank">http://www.w3.org/2001/04/xmldsig-more#rsa-sha256</a> instead it works and uses that sigalg.</div><div>
<br></div><div>So I am not sure if there is something else I have to do here. I had a quick scan of the logs but didn't see any clues. I thought it might be deemed work and filtered out but I couldn't see any evidence for that.</div>
<div><br></div><div>I am running Shib SP 2.5.3 on Windows Server 2008 R2. This was installed from an MSI.</div><div><br></div><div>Cheers</div><span class="HOEnZb"><font color="#888888"><div><br></div><div>M</div></font></span></div>
</blockquote></div><br></div>