https://issues.shibboleth.net/jira/browse/SSPCPP-273

[shibboleth/cpp-sp.git] / configs / shibboleth2.xml

diff --git a/configs/shibboleth2.xml b/configs/shibboleth2.xml
index 8ed5938..71b45e3 100644 (file)
--- a/configs/shibboleth2.xml
+++ b/configs/shibboleth2.xml
@@ -257,6 +257,12 @@
             <PolicyRule type="XMLSigning" errorFatal="true"/>
             <PolicyRule type="SimpleSigning" errorFatal="true"/>
         </Policy>
+        
+        <!-- Disables known weak algorithms. -->
+        <AlgorithmBlacklist>
+        http://www.w3.org/2001/04/xmldsig-more#md5
+        http://www.w3.org/2001/04/xmldsig-more#rsa-md5
+        </AlgorithmBlacklist>
     </SecurityPolicies>
 
 </SPConfig>