I actually have the same issue in that my sec engineering department will not allow any SHA-1 algorithms of any kind and require a minimum of SHA-256 for the digest algorithm. I am using CXF-3.1.0 and I was hoping the ability to override SHA-1 was now available and if so how can I do it.
Thanks! -Jeff -- View this message in context: http://cxf.547215.n5.nabble.com/CXF-Security-policy-signature-method-tp5732250p5760020.html Sent from the cxf-user mailing list archive at Nabble.com.
