Add PKCS 1.5 to blacklist.

[shibboleth/cpp-sp.git] / configs / security-policy.xml

diff --git a/configs/security-policy.xml b/configs/security-policy.xml
index fdaba43..4d9dfe7 100644 (file)
--- a/configs/security-policy.xml
+++ b/configs/security-policy.xml
@@ -29,8 +29,9 @@
     
     <!-- Disables known weak algorithms. -->
     <AlgorithmBlacklist>
-    http://www.w3.org/2001/04/xmldsig-more#md5
-    http://www.w3.org/2001/04/xmldsig-more#rsa-md5
+      http://www.w3.org/2001/04/xmldsig-more#md5
+      http://www.w3.org/2001/04/xmldsig-more#rsa-md5
+      http://www.w3.org/2001/04/xmlenc#rsa-1_5
     </AlgorithmBlacklist>
 
 </SecurityPolicies>