[CXF-5013] Need support for SHA256 Signature Algorithms

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 2.6.2
• Fix Version/s: 2.6.9, 2.7.6
• Component/s: WS-* Components

Environment

All supported platforms

• Estimated Complexity: Moderate
• Assignee: Colm O hEigeartaigh
• Reporter: Syed Abdul Wadood
• Created: 13/May/13 21:18
• Updated: 14/Aug/13 15:49
• Resolved: 14/May/13 09:52

Description

Due to the weakness of SHA1 algorithm, US National Institute of Standards and Technology (NIST) has recommended that SHA256 or higher algorithms be used. Using SHA256 is also required by Federal Information Processing Standard (FIPS).
Currently, there is no way to specify SHA256 Signature algorithms when signing a message part using Web services security.