<div dir="ltr">Thanks Scott.</div><div class="gmail_extra"><br><br><div class="gmail_quote">On 25 July 2014 17:29, Cantor, Scott <span dir="ltr"><<a href="mailto:cantor.2@osu.edu" target="_blank">cantor.2@osu.edu</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div>On 7/25/14, 8:14 AM, "Matheesha Weerasinghe" <<a href="mailto:matheesha@gmail.com">matheesha@gmail.com</a>> wrote:<br>
><br>
>I've tested as per<br>
><a href="https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPRelyingParty" target="_blank">https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPRelyingParty</a><br>
><<a href="https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPRelyingParty" target="_blank">https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPRelyingParty</a><br>
>> by adding a<br>
>signingAlg ="<a href="http://www.w3.org/2000/09/xmldsig#dsa-sha1" target="_blank">http://www.w3.org/2000/09/xmldsig#dsa-sha1</a>" in the<br>
><relyingparty> and <ApplicationOverride> elements. This however now<br>
>doesn't send a signed request at all.<br>
> I just have signing="true" in both of them.<br>
<br>
</div>There'd probably be something in the log about it, but I think if it gets<br>
an error using a configured algorithm when it's sending requests that it<br>
probably will just fall back to unsigned.<br>
<br>
Note that you certainly can't do this without creating a different key for<br>
the SP. You can't use an RSA key and sign with DSA.<br>
<br>
All that said, I have no earthly idea if DSA will work. I doubt it.<br>
<span class="HOEnZb"><font color="#888888"><br>
-- Scott<br>
<br>
--<br>
To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.net</a><br>
</font></span></blockquote></div><br></div>