瀏覽代碼

[py3] Update default SAML signing algorithm from SHA1 to SHA256

Prakash Ranade 3 年之前
父節點
當前提交
930c5acad1
共有 1 個文件被更改,包括 2 次插入2 次删除
  1. 2 2
      desktop/core/ext-py3/pysaml2-5.0.0/src/saml2/xmldsig/__init__.py

+ 2 - 2
desktop/core/ext-py3/pysaml2-5.0.0/src/saml2/xmldsig/__init__.py

@@ -20,7 +20,7 @@ DIGEST_SHA256 = 'http://www.w3.org/2001/04/xmlenc#sha256'
 DIGEST_SHA384 = 'http://www.w3.org/2001/04/xmldsig-more#sha384'
 DIGEST_SHA512 = 'http://www.w3.org/2001/04/xmlenc#sha512'
 DIGEST_RIPEMD160 = 'http://www.w3.org/2001/04/xmlenc#ripemd160'
-digest_default = DIGEST_SHA1
+digest_default = DIGEST_SHA256
 DIGEST_ALLOWED_ALG = (('DIGEST_SHA1', DIGEST_SHA1),
                       ('DIGEST_SHA224', DIGEST_SHA224),
                       ('DIGEST_SHA256', DIGEST_SHA256),
@@ -43,7 +43,7 @@ SIG_RSA_SHA256 = 'http://www.w3.org/2001/04/xmldsig-more#rsa-sha256'
 SIG_RSA_SHA384 = 'http://www.w3.org/2001/04/xmldsig-more#rsa-sha384'
 SIG_RSA_SHA512 = 'http://www.w3.org/2001/04/xmldsig-more#rsa-sha512'
 SIG_RSA_RIPEMD160 = 'http://www.w3.org/2001/04/xmldsig-more#rsa-ripemd160'
-sig_default = SIG_RSA_SHA1
+sig_default = SIG_RSA_SHA256
 SIG_ALLOWED_ALG = (('SIG_RSA_SHA1', SIG_RSA_SHA1),
                    ('SIG_RSA_SHA224', SIG_RSA_SHA224),
                    ('SIG_RSA_SHA256', SIG_RSA_SHA256),