From: scantor <scantor@cb58f699-b61c-0410-a6fe-9272a202ed29>
Date: Fri, 27 Jul 2012 20:31:49 +0000 (+0000)
Subject: Add PKCS 1.5 to blacklist.
X-Git-Tag: 2.5.0~22
X-Git-Url: http://www.project-moonshot.org/gitweb/?p=shibboleth%2Fsp.git;a=commitdiff_plain;h=9b974440558a5a4fb1addcee21f1becabb9caf02

Add PKCS 1.5 to blacklist.


git-svn-id: https://svn.shibboleth.net/cpp-sp/branches/REL_2@3736 cb58f699-b61c-0410-a6fe-9272a202ed29
---

diff --git a/configs/security-policy.xml b/configs/security-policy.xml
index fdaba43..4d9dfe7 100644
--- a/configs/security-policy.xml
+++ b/configs/security-policy.xml
@@ -29,8 +29,9 @@
     
     <!-- Disables known weak algorithms. -->
     <AlgorithmBlacklist>
-    http://www.w3.org/2001/04/xmldsig-more#md5
-    http://www.w3.org/2001/04/xmldsig-more#rsa-md5
+      http://www.w3.org/2001/04/xmldsig-more#md5
+      http://www.w3.org/2001/04/xmldsig-more#rsa-md5
+      http://www.w3.org/2001/04/xmlenc#rsa-1_5
     </AlgorithmBlacklist>
 
 </SecurityPolicies>