According to TUPAS spec, existing MD5 and SHA1 algorithms will be deprecated by 31.12.2011. A new algorithm SHA-256 needs to be implemented.
More information from Federation of Finnish Financial Services:
http://www.fkl.fi/en/themes/e-services/tupas/Pages/default.aspx
Comments
Comment #1
dotsi commentedComment #2
iler commentedAny ETA for this one? 31.12.2011 is coming sooner than you think it will be ;-)
Comment #3
dotsi commentedWell, the issue is here, free for anyone to pick up and implement ;) I'm not making any promises that I will have the time to work on this before the end of the year.
Comment #4
isampo commentedSHA256 algorithm is now available at the latest dev.
Note: If you're upgrading and want to start using the SHA256 algorithm (as you should), remember also to check your own Tupas return/validation functions that they are up-to-date. You might have been doing some validation there like:
The code for the new SHA256 algorithm at the Tupas documentation is 03. If your code is something like above and you don't update your code, it won't work. To make things simple, I added a simple function to the tupas.module that you can use to calculate the MAC. Like this:
Comment #5
juhaniemi commentedSo far this has been done only to 7.x branch. Backport patch would be welcome.
Comment #6
tuutti commented