Skip to content

Fixed logic to check if SP Metadata contains support for SHA-256 signing - #87

Open
bigdavisc wants to merge 1 commit into
fedtools:masterfrom
bigdavisc:securehashfix
Open

Fixed logic to check if SP Metadata contains support for SHA-256 signing#87
bigdavisc wants to merge 1 commit into
fedtools:masterfrom
bigdavisc:securehashfix

Conversation

@bigdavisc

Copy link
Copy Markdown

To address #86, this change corrects the logic in Get-ADFSTkSecureHashAlgorithm to correctly look for <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/> in the top-level <md:Extensions> section of the <EntityDescriptor>.

@bigdavisc

Copy link
Copy Markdown
Author

I will note that while this PR is likely sufficient to achieve the behavior that I believe the original author was intending to implement, it may be worthwhile to consider additional functionality to also check for <alg:SigningMethod> blocks in the Extensions of the EntityDescriptor's roles. E.g. within <SPSSODescriptor> for example (as documented in the spec).

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant