Hi,
It seems that ruby-saml does not support the encryption URI XML 1,1 RSA-OAEP-11 (Algorithme = « http://www.w3.org/2009/xmlenc11#rsa-oaep ») with separate configuration for the MGF and the digest (par exemple, MGF1 avec SHA-256).
When reviewing the latest connection logs, the response always indicates the use of the XMLENC11 RSA-OAEP (for example, Algorithme = « http://www.w3.org/2009/xmlenc11#rsa-oaep » plus <xenc11:MGF …>).
To reproduce the issue, you can install Keycloak and set up a SAML connection using a tool that utilizes ruby-saml.
Would it be possible to support the encryption URI with separate configurations for MGF and DIGEST?
Thank you in advance for your help,
Sincerely,
Hi,
It seems that ruby-saml does not support the encryption URI XML 1,1 RSA-OAEP-11 (Algorithme = « http://www.w3.org/2009/xmlenc11#rsa-oaep ») with separate configuration for the MGF and the digest (par exemple, MGF1 avec SHA-256).
When reviewing the latest connection logs, the response always indicates the use of the XMLENC11 RSA-OAEP (for example, Algorithme = « http://www.w3.org/2009/xmlenc11#rsa-oaep » plus <xenc11:MGF …>).
To reproduce the issue, you can install Keycloak and set up a SAML connection using a tool that utilizes ruby-saml.
Would it be possible to support the encryption URI with separate configurations for MGF and DIGEST?
Thank you in advance for your help,
Sincerely,