From 77b9a943b555abe4867e6f78d6ede43a5e05aa9e Mon Sep 17 00:00:00 2001 From: Thomas Lenz Date: Tue, 31 Jan 2017 10:06:17 +0100 Subject: update default config --- .../deploy/conf/moa-id/eIDAS/EncryptModule.xml | 24 ++++++++++++-- .../data/deploy/conf/moa-id/eIDAS/SignModule.xml | 37 +++++++++++++++++++--- 2 files changed, 54 insertions(+), 7 deletions(-) (limited to 'id') diff --git a/id/server/data/deploy/conf/moa-id/eIDAS/EncryptModule.xml b/id/server/data/deploy/conf/moa-id/eIDAS/EncryptModule.xml index 9fef4fa2e..46052053a 100644 --- a/id/server/data/deploy/conf/moa-id/eIDAS/EncryptModule.xml +++ b/id/server/data/deploy/conf/moa-id/eIDAS/EncryptModule.xml @@ -3,14 +3,32 @@ SWModule encrypt with JKS. - keys/eidasKeyStore.jks + + false + false + false + + + http://www.w3.org/2009/xmlenc11#aes256-gcm + + + + http://www.w3.org/2009/xmlenc11#aes128-gcm; + http://www.w3.org/2009/xmlenc11#aes256-gcm; + http://www.w3.org/2009/xmlenc11#aes192-gcm + + + + http://www.w3.org/2001/04/xmlenc#rsa-oaep-mgf1p + + keys/eidasKeyStore.jks + JKS local-demo local-demo eIDAS/encryptionConf.xml - CN=local-demo-cert, OU=DIGIT, O=European Comission, L=Brussels, ST=Belgium,C=BE 54C8F779 @@ -18,5 +36,5 @@ CN=local-demo-cert, OU=DIGIT, O=European Comission, L=Brussels, ST=Belgium, C=BE 54C8F779 - JKS + \ No newline at end of file diff --git a/id/server/data/deploy/conf/moa-id/eIDAS/SignModule.xml b/id/server/data/deploy/conf/moa-id/eIDAS/SignModule.xml index 745580428..bf7215cb5 100644 --- a/id/server/data/deploy/conf/moa-id/eIDAS/SignModule.xml +++ b/id/server/data/deploy/conf/moa-id/eIDAS/SignModule.xml @@ -3,17 +3,46 @@ SWModule sign with JKS. - keys/eidasKeyStore_Service_CB.jks + false + false + + + + + + http://www.w3.org/2001/04/xmldsig-more#rsa-sha512 + + + + http://www.w3.org/2001/04/xmldsig-more#rsa-sha256; + http://www.w3.org/2001/04/xmldsig-more#rsa-sha384; + http://www.w3.org/2001/04/xmldsig-more#rsa-sha512; + http://www.w3.org/2001/04/xmldsig-more#rsa-ripemd160; + http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha256; + http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha384; + http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha512; + http://www.w3.org/2007/05/xmldsig-more#sha256-rsa-MGF1; + http://www.w3.org/2007/05/xmldsig-more#sha256-rsa-mgf1 + + + + true + + + keys/eidasKeyStore_Service_CB.jks + JKS local-demo local-demo CN=cpeps-cb-demo-certificate, OU=STORK, O=CPEPS, L=EU, ST=EU, C=CB 54C8F839 - JKS - keys/eidasKeyStore_METADATA.jks + + + keys/eidasKeyStore_METADATA.jks + JKS local-demo local-demo CN=metadata, OU=DIGIT, O=EC, L=Brussels, ST=EU, C=BE 561BC0C8 - JKS + -- cgit v1.2.3