search

SAML-Toolkits / php-saml

Simple SAML toolkit for PHP
MIT License
1.22k stars 468 forks source link

Signing algorithm http://www.w3.org/2007/05/xmldsig-more#sha256-rsa-MGF1 #590

Open joonlabs opened 2 months ago

joonlabs commented 2 months ago

Hey there,

Is there any way to sign using RSA-PSS with http://www.w3.org/2007/05/xmldsig-more#sha256-rsa-MGF1 method?

Best regards Julius

pitbulk commented 1 week ago

Not supported.

joonlabs commented 1 week ago

@pitbulk thanks, I saw that in the code. But the actual reasons for this, is the underlying robrichards/xmlseclibs library. If we could switch from the openssl implementation to a phpseclib/phpseclib one, we could support it easily. I opened an issue at the robrichards/xmlseclibs library: https://github.com/robrichards/xmlseclibs/issues/263

These algorithms are required by modern IDPs. We are working for municipalities in Germany and connecting to the ELSTER IDP of the German governmant, that only supports these modern encryption algorithms.