[OpenID] Association problem with Net::OpenID::Server-based provider

Joost Cassee joost at cassee.net
Fri Nov 9 16:36:01 UTC 2007


Hello all,


I am running an OpenID provider based on the Net::OpenID::Server perl
library. The server passes the whole test at
http://openidenabled.com/resources/openid-test/diagnose-server/. It also
works with some selected providers, too, like LiveJournal (not
surprising, considering the source of the library :-) ).

However, it fails to associate against most of the consumers in the
wild. I find it difficult to debug this problem. An example session
(from ma.gnolia) follows:

Incoming request POST data:
openid.dh_consumer_public:
Xgs93DM0cly4Jac54hpaFDLYujgcHbCm30c0oBXga4oA7eALQ0N5GZmhbT5nZvNQvS3uVen4SM4hSZpEOAYFbxiMGwhCykK9kBvRbE+czs9wuEhKLrQ4LtZnnx+uRU7Oj03UU60wQTa7HSksa7zgucBCxpe9M5QGM40OYTn9jvU=
openid.dh_modulus:
ANz5OguIOXLsDhmYmsWizjEOHTdxfo2Vcbt2I3MYZuYe91ouJ4mLBX+YkcLiemOcPym2CBRYHNOyyjmG0mg3BVd9RcLn5S3IHHoXGHblzqdLFEi/368Ygo79JRnxTkXjgmY0rxlJ5bU1zIKaSDuKdiI+XUkKJX8Fvf8W8vsixYOr

Response:
assoc_handle: 1194625955:qDiHDdO2DYyyqhBEn3Ft:289151a68d
assoc_type: HMAC-SHA1
dh_server_public:
PNJytoUG4frEon990/FHdfxAh7HfgG7A7bx4/R9eZng7S0aN3fTfDfmxXnSpfJ6M/RbzfxEeR27/CSTcn+UvLsF2XS2497AmmWByIwXbg69TGAH8klE2aAD3HrDzQU4Rv3jPLIJPEL1WJMz3iY38iD3MmGU1RgAarc2oLpYEFZ0=
enc_mac_key: dxfOu+LdZMXxXm7s84mlHya7NWY=
expires_in: 1150045
session_type: DH-SHA1

And ma.gnolia shows an error page... Probably not enough to see the
problem, but maybe anyone can tell me where I need to look.


Regards,

Joost

-- 
Joost Cassee
http://joost.cassee.net

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 479 bytes
Desc: OpenPGP digital signature
URL: <http://lists.openid.net/pipermail/openid-general/attachments/20071109/856ebb90/attachment-0002.pgp>


More information about the general mailing list