JWT content encryption algorithm selection

Products

• CA API Gateway

Issue/Introduction

We are in process of setting up encryption with Encode JSON web Token assertion. But the ciphers seem limited.

Is there a way to have stronger Ciphers?

Environment

Release : 10.1

Resolution

Per Below documentation link you can expose stronger algorithms by setting cluster wide property.

Policy Manager -> Tasks -> Global Settings -> Cluster wide properties

Add  jwt.showAllAlgorithms = true

And restart the gateway service

# service ssg restart

 

https://techdocs.broadcom.com/us/en/ca-enterprise-software/layer7-api-management/api-gateway/10-1/policy-assertions/assertion-palette/message-validation-transformation-assertions/encode-json-web-token-assertion.html