search

wso2 / api-manager

All issues, tasks, improvements and new features of WSO2 API Manager
Apache License 2.0
34 stars 8 forks source link

Remove SHA1 Default Usages and Provide Support to Use SHA-256 #2848

Open hisanhunais opened 4 months ago

hisanhunais commented 4 months ago

Problem

SHA1 is no longer considered as secure. It needs to be updated to SHA256 or higher.

Solution

Removal of SHA-1 usages in applicable scenarios and provide a config to use SHA-256 in other scenarios keeping SHA-1 usage as the default

Affected Component

APIM

Version

4.3.0

Implementation

No response

Related Issues

No response

Suggested Labels

No response

RakhithaRR commented 4 weeks ago

Pending version upgrades

https://github.com/wso2-extensions/identity-outbound-auth-samlsso/pull/179 https://github.com/wso2/carbon-kernel/pull/4040