Skip to content

Conversation

@peppelinux
Copy link
Member

@peppelinux peppelinux commented Jul 20, 2019

Kantara SAML V2.0 Implementation Profile for Federation Interoperability specifications:

[IIP-ALG08]
Implementations MUST support the ability to prevent the use of particular algorithms such that any attempt to configure or select them will result in failure. The set of such algorithms MUST be configurable and it is RECOMMENDED that the default set include:

Digest

http://www.w3.org/2001/04/xmldsig-more#md5 [RFC4051]

Signature

http://www.w3.org/2001/04/xmldsig-more#rsa-md5 [RFC4051]

All Submissions:

  • Have you checked to ensure there aren't other open Pull Requests for the same update/change?
  • Have you added an explanation of what problem you are trying to solve with this PR?
  • x] Have you added information on what your changes do and why you chose this as your solution?
  • Have you written new tests for your changes?
  • Does your submission pass tests?
  • This project follows PEP8 style guide. Have you run your code against the 'flake8' linter?

@c00kiemon5ter
Copy link
Member

As the spec says, this must be configurable. It is a policy setting, not something we must disable. I someone needs to, they can and should be able to use any weak algorithm.

This will be done as it has been discussed in #421

@peppelinux
Copy link
Member Author

Ok Ivan, I'll do a PR with this feature

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants