<div dir="ltr">From the documentation, i found where to configure.<div><br></div><div>${idp.home}/conf/idp.properties</div><div><div># To default to SHA-1, set to shibboleth.SigningConfiguration.SHA1</div><div>idp.signing.config = shibboleth.SigningConfiguration.SHA1</div></div><div><br></div><div>And restarted the server.</div><div>But even after this configuration change, i still see the saml response being signed with sha512 algorithm and its evident from the idp-process.log. Is this a configuration issue or a bug?</div><div><br></div><div>I request to throw some light on this.</div><div><br></div><div>----------</div><div><div> <ds:Signature</div><div> xmlns:ds="<a href="http://www.w3.org/2000/09/xmldsig#">http://www.w3.org/2000/09/xmldsig#</a>"></div><div><ds:SignedInfo></div><div><ds:CanonicalizationMethod</div><div> Algorithm="<a href="http://www.w3.org/2001/10/xml-exc-c14n#">http://www.w3.org/2001/10/xml-exc-c14n#</a>"/></div><div><ds:SignatureMethod</div><div> Algorithm="<a href="http://www.w3.org/2001/04/xmldsig-more#rsa-sha512">http://www.w3.org/2001/04/xmldsig-more#rsa-sha512</a>"/></div><div><ds:Reference</div><div> URI="#_99173909f4f9a1346ce82b1703e81cbc"></div><div><ds:Transforms></div><div><ds:Transform</div><div> Algorithm="<a href="http://www.w3.org/2000/09/xmldsig#enveloped-signature">http://www.w3.org/2000/09/xmldsig#enveloped-signature</a>"/></div><div><ds:Transform</div><div> Algorithm="<a href="http://www.w3.org/2001/10/xml-exc-c14n#">http://www.w3.org/2001/10/xml-exc-c14n#</a>"/></div><div></ds:Transforms></div><div><ds:DigestMethod Algorithm="<a href="http://www.w3.org/2001/04/xmlenc#sha512">http://www.w3.org/2001/04/xmlenc#sha512</a>"/></div></div><div><br></div><div>-----</div></div><div class="gmail_extra"><br><div class="gmail_quote">On Wed, Jul 13, 2016 at 12:02 PM, Muthuraman Sethuraman Sethuraman (US - Advisory) <span dir="ltr"><<a href="mailto:muthuraman.sethuraman@pwc.com" target="_blank">muthuraman.sethuraman@pwc.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr"><p class="MsoNormal" style="font-size:12.8px"><span lang="EN-US" style="color:rgb(31,73,125)">Netscaler SP is not supporting SHA512 algorithms yet.<u></u><u></u></span></p><p class="MsoNormal" style="font-size:12.8px"><span lang="EN-US" style="color:rgb(31,73,125)"><u></u> <u></u></span></p><p class="MsoNormal" style="font-size:12.8px"><span lang="EN-US" style="color:rgb(31,73,125)">In the IDP SAML response, i ccould see this entry</span></p><p class="MsoNormal" style="font-size:12.8px"><span lang="EN-US" style="color:rgb(31,73,125)">Algorithm="<a href="http://www.w3.org/2001/04/xmldsig-more#rsa-sha512" target="_blank">http://www.w3.org/2001/04/xmldsig-more#rsa-sha512</a><u></u><u></u></span></p><p class="MsoNormal" style="font-size:12.8px"><span lang="EN-US" style="color:rgb(31,73,125)"><u></u> <u></u></span></p><p class="MsoNormal" style="font-size:12.8px"><font color="#1f497d">Is there a way i can configure Shibboleth IDP 3.2.1 to use sha256 algorithm to sign the response.</font></p><span class="HOEnZb"><font color="#888888"><p class="MsoNormal" style="font-size:12.8px"><font color="#1f497d"><br></font></p>-- <br><div data-smartmail="gmail_signature"><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><b>Muthuraman S</b><div><span style="font-size:12.8px">PwC | SDC Manager | IdAM</span></div><div><div style="font-size:12.8px">Office: <a href="tel:%2B1%20404-838-4445" value="+14046021223" style="color:rgb(17,85,204)" target="_blank">+1 404-838-4445</a> | Mobile: <a href="tel:%2B91-9886302072" value="+919845127625" style="color:rgb(17,85,204)" target="_blank">+91-9886302072</a></div><div style="font-size:12.8px">Email: <a href="mailto:muthuraman.sethuraman@pwc.com" style="color:rgb(17,85,204)" target="_blank">muthuraman.sethuraman@pwc.com</a></div><div style="font-size:12.8px">PricewaterhouseCoopers LLP</div><div style="font-size:12.8px">EGL Business Park, Bengaluru, India</div><div style="font-size:12.8px"><span style="font-size:12.8px"><a href="http://www.pwc.com/us" style="color:rgb(17,85,204)" target="_blank">http://www.pwc.com/us</a></span></div></div></div></div></div></div></div></div></div></div>
</font></span></div>
</blockquote></div><br><br clear="all"><div><br></div>-- <br><div class="gmail_signature" data-smartmail="gmail_signature"><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><b>Muthuraman S</b><div><span style="font-size:12.8px">PwC | SDC Manager | IdAM</span></div><div><div style="font-size:12.8px">Office: <a href="tel:%2B1%20404-838-4445" value="+14046021223" style="color:rgb(17,85,204)" target="_blank">+1 404-838-4445</a> | Mobile: <a href="tel:%2B91-9886302072" value="+919845127625" style="color:rgb(17,85,204)" target="_blank">+91-9886302072</a></div><div style="font-size:12.8px">Email: <a href="mailto:muthuraman.sethuraman@pwc.com" style="color:rgb(17,85,204)" target="_blank">muthuraman.sethuraman@pwc.com</a></div><div style="font-size:12.8px">PricewaterhouseCoopers LLP</div><div style="font-size:12.8px">EGL Business Park, Bengaluru, India</div><div style="font-size:12.8px"><span style="font-size:12.8px"><a href="http://www.pwc.com/us" style="color:rgb(17,85,204)" target="_blank">http://www.pwc.com/us</a></span></div></div></div></div></div></div></div></div></div></div>
</div>
<HR>The information transmitted, including any attachments, is intended only for the person or entity to which it is addressed and may contain confidential and/or privileged material. Any review, retransmission, dissemination or other use of, or taking of any action in reliance upon, this information by persons or entities other than the intended recipient is prohibited, and all liability arising therefrom is disclaimed. If you received this in error, please contact the sender and delete the material from any computer. PricewaterhouseCoopers LLP is a Delaware limited liability partnership. This communication may come from PricewaterhouseCoopers LLP or one of its subsidiaries.<BR>