dani/lemonldap-ng
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Switch default SAML signature alg to SHA256 (#2341)

Browse Source
This commit is contained in:
Maxime Besson 2020-09-22 22:13:26 +02:00
parent 856f798e4d
commit f74787f81a
4 changed files with 4 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
lemonldap-ng-common/lib/Lemonldap/NG/Common/Conf/DefaultValues.pm
View File

@ -310,7 +310,7 @@ sub defaultValues {
'samlOrganizationURL' => 'http://www.example.com', 'samlOrganizationURL' => 'http://www.example.com',
'samlOverrideIDPEntityID' => '', 'samlOverrideIDPEntityID' => '',
'samlRelayStateTimeout' => 600, 'samlRelayStateTimeout' => 600,
'samlServiceSignatureMethod' => 'RSA_SHA1', 'samlServiceSignatureMethod' => 'RSA_SHA256',
'samlSPSSODescriptorArtifactResolutionServiceArtifact' => 'samlSPSSODescriptorArtifactResolutionServiceArtifact' =>
'1;0;urn:oasis:names:tc:SAML:2.0:bindings:SOAP;#PORTAL#/saml/artifact', '1;0;urn:oasis:names:tc:SAML:2.0:bindings:SOAP;#PORTAL#/saml/artifact',
'samlSPSSODescriptorAssertionConsumerServiceHTTPArtifact' => 'samlSPSSODescriptorAssertionConsumerServiceHTTPArtifact' =>

2
lemonldap-ng-manager/lib/Lemonldap/NG/Manager/Attributes.pm
View File

@ -3427,7 +3427,7 @@ qr/(?:(?:https?):\/\/(?:(?:(?:(?:(?:(?:[a-zA-Z0-9][-a-zA-Z0-9]*)?[a-zA-Z0-9])[.]
'type' => 'RSAPublicKeyOrCertificate' 'type' => 'RSAPublicKeyOrCertificate'
}, },
'samlServiceSignatureMethod' => { 'samlServiceSignatureMethod' => {
'default' => 'RSA_SHA1', 'default' => 'RSA_SHA256',
'select' => [ { 'select' => [ {
'k' => 'RSA_SHA1', 'k' => 'RSA_SHA1',
'v' => 'RSA SHA1' 'v' => 'RSA SHA1'

2
lemonldap-ng-manager/lib/Lemonldap/NG/Manager/Build/Attributes.pm
View File

@ -2498,7 +2498,7 @@ sub attributes {
{ k => 'RSA_SHA384', v => 'RSA SHA384' }, { k => 'RSA_SHA384', v => 'RSA SHA384' },
{ k => 'RSA_SHA512', v => 'RSA SHA512' }, { k => 'RSA_SHA512', v => 'RSA SHA512' },
], ],
default => 'RSA_SHA1', default => 'RSA_SHA256',
}, },
samlServiceUseCertificateInResponse => { samlServiceUseCertificateInResponse => {
type => 'bool', type => 'bool',

2
lemonldap-ng-manager/site/htdocs/static/struct.json
View File

File diff suppressed because one or more lines are too long