robrichards/xmlseclibs

Unsupported Signature

Closed this issue · 4 comments

satelines commented

Hello,
I try to send an Saml request to IDP, that accept SignatureMethod http://www.w3.org/2007/05/xmldsig-more#sha256-rsa-MGF1.
But unfortunately, there is no possibility to send a request with this SignatureMethod http://www.w3.org/2007/05/xmldsig-more#sha256-rsa-MGF1. Is there any workaround, or a solution for it?
The request should containt this part as:
<ds:SignatureMethod Algorithm="http://www.w3.org/2007/05/xmldsig-more#sha256-rsa-MGF1" />

Thanks!

tvdijen commented

I've never seen anything like it.. What IDP requires that? And what SP are you using?

satelines commented

I've never seen anything like it.. What IDP requires that? And what SP are you using?

I use symfony 5 and lightsaml for sending the saml request.
I need to send AuthnRequest to Elster, this is a the German Tax office. My users muss to be authenticated trough Elster. Elster required this signature. I asked Support, and they told me, that with Java it could be made easylly, and they have no clue about PHP.

I tried to find a solution, but unfortunately I didn't find anything yet.

tvdijen commented

It's really strange for them to support just one algorithm.. Any way, if openssl supports the algorithm, you could for this library and add the algorithm-identifiers... It might work out-of-the-box, but it's far from ideal.

satelines commented

@tvdijen Thank you very much for your help. Unfortunately openssl doesn't support the algorithm. But finally I found a solution :)
I needed to fork a copy and I add my changes.