search

robrichards / xmlseclibs

A PHP library for XML Security
BSD 3-Clause "New" or "Revised" License
386 stars 180 forks source link

Unsupported Signature #243

Closed satelines closed 2 years ago

satelines commented 2 years ago

Hello, I try to send an Saml request to IDP, that accept SignatureMethod http://www.w3.org/2007/05/xmldsig-more#sha256-rsa-MGF1. But unfortunately, there is no possibility to send a request with this SignatureMethod http://www.w3.org/2007/05/xmldsig-more#sha256-rsa-MGF1. Is there any workaround, or a solution for it? The request should containt this part as:

Thanks!

tvdijen commented 2 years ago

I've never seen anything like it.. What IDP requires that? And what SP are you using?

satelines commented 2 years ago

I've never seen anything like it.. What IDP requires that? And what SP are you using?

I use symfony 5 and lightsaml for sending the saml request. I need to send AuthnRequest to Elster, this is a the German Tax office. My users muss to be authenticated trough Elster. Elster required this signature. I asked Support, and they told me, that with Java it could be made easylly, and they have no clue about PHP.

I tried to find a solution, but unfortunately I didn't find anything yet.

tvdijen commented 2 years ago

It's really strange for them to support just one algorithm.. Any way, if openssl supports the algorithm, you could for this library and add the algorithm-identifiers... It might work out-of-the-box, but it's far from ideal.

satelines commented 2 years ago

@tvdijen Thank you very much for your help. Unfortunately openssl doesn't support the algorithm. But finally I found a solution :) I needed to fork a copy and I add my changes.