Skip to content
New issue

Have a question about this project? # for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “#”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? # to your account

It is forbidden to use algorithm http://www.w3.org/2000/09/xmldsig#rsa-sha1 when secure validation is enabled #2957

Open
praphullkumarsingh opened this issue Dec 18, 2024 · 1 comment

Comments

@praphullkumarsingh
Copy link

It is forbidden to use algorithm http://www.w3.org/2000/09/xmldsig#rsa-sha1 when secure validation is enabled

Description

While working on a project where i need to migrate code base from java 8 to java21.
Some test cases are failing with these error
javax.xml.crypto.MarshalException: It is forbidden to use algorithm http://www.w3.org/2000/09/xmldsig#rsa-sha1 when secure validation is enabled
After that i made changes to java.security file to enable it i made below changes:
jdk.xml.dsig.secureValidationPolicy= maxTransforms 5,\ maxReferences 30,\ disallowReferenceUriSchemes file http https,\ minKeySize RSA 1024,\ minKeySize DSA 1024,\ minKeySize EC 224,\ noDuplicateIds,\ noRetrievalMethodLoops
After that some test cases ran successfully but for one test class getting this error
javax.xml.crypto.dsig.XMLSignatureException: cannot find validation key for xml file digital signature not working.
I totally blocked here Don't know what i can do next.I can't update Algo to higher version like RSA256 .I want to enable rsa-sha1.
Any Help will be appreciated.
Is this a question about how to use FusionAuth? Please consider posting on the FusionAuth forum instead.

Community guidelines

All issues filed in this repository must abide by the FusionAuth community guidelines.

@robotdan
Copy link
Member

robotdan commented Dec 20, 2024

Duplicate of #2160 ?
Related to #1814 and #1203

What version of FusionAuth are you using?

# for free to join this conversation on GitHub. Already have an account? # to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants