Produits Entr'ouvert » Lasso

When building a signed SAML response, there is no way to set the "DigestMethod" of the signature to SHA256, It defaults to SHA1

Attached is a test case, note this is the same test case as issue 10154 hence the name "lasso-bug.tar.bz2"


<Signature xmlns="http://www.w3.org/2000/09/xmldsig#">
<SignedInfo>
<CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
<SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/>
<Reference URI="#_A7F3AF0951AD63AB216597DE5743EC91">
<Transforms>
<Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/>
<Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
</Transforms>
*<DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/>*
<DigestValue>...</DigestValue>
</Reference>
</SignedInfo>
<SignatureValue>...</SignatureValue>
<KeyInfo>
<X509Data>
<X509Certificate>...</X509Certificate>
</X509Data>
</KeyInfo>
</Signature>