[OpenID] ERROR DotNetOpenAuth.Messaging.Bindings - Signature verification failed

Andrew Arnott andrewarnott at gmail.com
Tue Jul 14 07:59:25 UTC 2009


I'm afraid I can't determine where the difference lies in the signature
validation since I'm unfamiliar with the OP you're testing against.  I
assume this is the only OP that has this interop problem?  Have you tested
against other OPs?
--
Andrew Arnott
"I [may] not agree with what you have to say, but I'll defend to the death
your right to say it." - S. G. Tallentyre


On Tue, Jul 14, 2009 at 12:33 AM, Nam Trần <namtv84 at gmail.com> wrote:

> Hi Andrew,
>
> I'm using DotNetOpenAuth v3.2 and in my Tracepage.aspx have a signature
> error message.
>
>
> Thân,
> NamTV
> Tel : 0904646872
> Add : 460/4/24 Le Van Luong, Q7, HCM
> Homepage : http://namtv.me
>
>
> 2009/7/14 Andrew Arnott <andrewarnott at gmail.com>
>
> Hi,
>> It doesn't look like the tracepage log you included came from the sample
>> RP you provide the URL for.  DotNetOpenAuth v3.0 doesn't support some of the
>> v3.2 features I'm seeing in the tracepage output.  Are you actually using
>> v3.2, and do you see a signature error on v3.2 as well?
>>
>> --
>> Andrew Arnott
>> "I [may] not agree with what you have to say, but I'll defend to the death
>> your right to say it." - S. G. Tallentyre
>>
>>
>> On Tue, Jul 14, 2009 at 12:08 AM, Nam Trần <namtv84 at gmail.com> wrote:
>>
>>> Dear,
>>>
>>> I have test an openid provider at
>>> http://dotnetopenauth.net/Samples/v3.0/OpenIdRelyingPartyWebForms/login.aspx
>>>
>>> and I have an error Message : Login failed: Message signature was
>>> incorrect.
>>>
>>> The TracePage is :
>>>
>>> 686 (GMT+7) [1] INFO  DotNetOpenAuth.Yadis - Performing discovery on user-supplied identifier: https://openid.zing.vn/op/zid
>>>
>>>
>>>
>>>
>>>
>>>
>>>
>>> 2009-07-14 13:25:48,686 (GMT+7) [1] INFO  DotNetOpenAuth.OpenId - Creating authentication request for user supplied Identifier: https://openid.zing.vn/op/zid
>>>
>>>
>>>
>>>
>>>
>>> 2009-07-14 13:25:48,686 (GMT+7) [1] WARN  DotNetOpenAuth.OpenId - No Simple Registration (ClaimsRequest) extension present in the request to spread to AX.
>>>
>>>
>>> 2009-07-14 13:25:48,686 (GMT+7) [1] INFO  DotNetOpenAuth.Messaging.Channel - Prepared outgoing CheckIdRequest (2.0) message for https://openid.zing.vn/op/en/action:
>>>
>>>
>>>
>>>
>>>
>>> 	openid.claimed_id: http://specs.openid.net/auth/2.0/identifier_select
>>>
>>>
>>> 	openid.identity: http://specs.openid.net/auth/2.0/identifier_select
>>> 	openid.assoc_handle: MkHrHYDppmee_4a5c2578_NKDHgi
>>> 	openid.return_to: http://localhost/OpenID/login.aspx?ReturnUrl=%2FOpenID%2FMembersOnly%2FDefault.aspx&dnoa.UsePersistentCookie=False&dnoa.receiver=ctl00_Main_yahooLoginButton&dnoa.userSuppliedIdentifier=https%3A%2F%2Fopenid.zing.vn%2Fop%2Fzid&dnoa.return_to_sig_handle=%7B633831495486861389%7D%7BQlUQgA%3D%3D%7D&dnoa.return_to_sig=QbIWxrnRFxgIAYMyAggA2dhkDHMcHqo%2F1p0TCYfAljCFzhHDUFoiD%2Bch5Kr7LkIkQ3VRrokghZt7M0xAjzRQ%2FA%3D%3D
>>>
>>>
>>>
>>>
>>>
>>>
>>>
>>> 	openid.realm: http://localhost/OpenID/
>>> 	openid.mode: checkid_setup
>>> 	openid.ns: http://specs.openid.net/auth/2.0
>>>
>>>
>>>
>>>
>>>
>>> 2009-07-14 13:25:50,609 (GMT+7) [1] INFO  DotNetOpenAuth.Messaging.Channel - Scanning incoming request for messages: http://localhost/OpenID/login.aspx?ReturnUrl=%2FOpenID%2FMembersOnly%2FDefault.aspx&dnoa.UsePersistentCookie=False&dnoa.receiver=ctl00_Main_yahooLoginButton&dnoa.userSuppliedIdentifier=https%3A%2F%2Fopenid.zing.vn%2Fop%2Fzid&dnoa.return_to_sig_handle=%7B633831495486861389%7D%7BQlUQgA%3D%3D%7D&dnoa.return_to_sig=QbIWxrnRFxgIAYMyAggA2dhkDHMcHqo%2F1p0TCYfAljCFzhHDUFoiD%2Bch5Kr7LkIkQ3VRrokghZt7M0xAjzRQ%2FA%3D%3D&openid.assoc_handle=MkHrHYDppmee_4a5c2578_NKDHgi&openid.claimed_id=https%3A%2F%2Fopenid.zing.vn%2Fop%2Fid%2Fd0917fbecc245e77d9d3e16b6b47dd17&openid.identity=https%3A%2F%2Fopenid.zing.vn%2Fop%2Fid%2Fd0917fbecc245e77d9d3e16b6b47dd17&openid.mode=id_res&openid.ns=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0&openid.op_endpoint=https%3A%2F%2Fopenid.zing.vn%2Fop%2Fen%2Faction&openid.response_nonce=2009-07-14T06%3A29%3A28Zro0Bvm&openid.return_to=http%3A%2F%2Flocalhost%2FOpenID%2Flogin.aspx%3FReturnUrl%3D%252FOpenID%252FMembersOnly%252FDefault.aspx%26dnoa.UsePersistentCookie%3DFalse%26dnoa.receiver%3Dctl00_Main_yahooLoginButton%26dnoa.userSuppliedIdentifier%3Dhttps%253A%252F%252Fopenid.zing.vn%252Fop%252Fzid%26dnoa.return_to_sig_handle%3D%257B633831495486861389%257D%257BQlUQgA%253D%253D%257D%26dnoa.return_to_sig%3DQbIWxrnRFxgIAYMyAggA2dhkDHMcHqo%252F1p0TCYfAljCFzhHDUFoiD%252Bch5Kr7LkIkQ3VRrokghZt7M0xAjzRQ%252FA%253D%253D&openid.sig=McbcRCL%2F3vtbHVKyDtaGyT95Ahc%3D&openid.signed=assoc_handle%2Cclaimed_id%2Cidentity%2Cmode%2Cns%2Cop_endpoint%2Cresponse_nonce%2Creturn_to%2Csigned
>>>
>>>
>>>
>>>
>>>
>>>
>>>
>>> 2009-07-14 13:25:50,609 (GMT+7) [1] INFO  DotNetOpenAuth.Messaging.Channel - Processing incoming PositiveAssertionResponse (2.0) message:
>>> 	openid.claimed_id: https://openid.zing.vn/op/id/d0917fbecc245e77d9d3e16b6b47dd17
>>>
>>>
>>>
>>>
>>>
>>>
>>>
>>> 	openid.identity: https://openid.zing.vn/op/id/d0917fbecc245e77d9d3e16b6b47dd17
>>> 	openid.sig: McbcRCL/3vtbHVKyDtaGyT95Ahc=
>>>
>>>
>>>
>>>
>>>
>>> 	openid.signed: assoc_handle,claimed_id,identity,mode,ns,op_endpoint,response_nonce,return_to,signed
>>>
>>>
>>> 	openid.assoc_handle: MkHrHYDppmee_4a5c2578_NKDHgi
>>> 	openid.op_endpoint: https://openid.zing.vn/op/en/action
>>> 	openid.return_to: http://localhost/OpenID/login.aspx?ReturnUrl=%2FOpenID%2FMembersOnly%2FDefault.aspx&dnoa.UsePersistentCookie=False&dnoa.receiver=ctl00_Main_yahooLoginButton&dnoa.userSuppliedIdentifier=https%3A%2F%2Fopenid.zing.vn%2Fop%2Fzid&dnoa.return_to_sig_handle=%7B633831495486861389%7D%7BQlUQgA%3D%3D%7D&dnoa.return_to_sig=QbIWxrnRFxgIAYMyAggA2dhkDHMcHqo%2F1p0TCYfAljCFzhHDUFoiD%2Bch5Kr7LkIkQ3VRrokghZt7M0xAjzRQ%2FA%3D%3D
>>>
>>>
>>>
>>>
>>>
>>>
>>>
>>> 	openid.response_nonce: 2009-07-14T06:29:28Zro0Bvm
>>> 	openid.mode: id_res
>>> 	openid.ns: http://specs.openid.net/auth/2.0
>>> 	ReturnUrl: /OpenID/MembersOnly/Default.aspx
>>>
>>>
>>>
>>>
>>>
>>>
>>>
>>> 	dnoa.UsePersistentCookie: False
>>> 	dnoa.receiver: ctl00_Main_yahooLoginButton
>>> 	dnoa.userSuppliedIdentifier: https://openid.zing.vn/op/zid
>>> 	dnoa.return_to_sig_handle: {633831495486861389}{QlUQgA==}
>>>
>>>
>>>
>>>
>>>
>>>
>>>
>>> 	dnoa.return_to_sig: QbIWxrnRFxgIAYMyAggA2dhkDHMcHqo/1p0TCYfAljCFzhHDUFoiD+ch5Kr7LkIkQ3VRrokghZt7M0xAjzRQ/A==
>>>
>>> 2009-07-14 13:25:50,624 (GMT+7) [1] ERROR DotNetOpenAuth.Messaging.Bindings - Signature verification failed.
>>>
>>>
>>>
>>>
>>>
>>>
>>>
>>> 2009-07-14 13:25:50,624 (GMT+7) [1] INFO  DotNetOpenAuth.Messaging.Channel - Scanning incoming request for messages: http://localhost/OpenID/login.aspx?ReturnUrl=%2FOpenID%2FMembersOnly%2FDefault.aspx&dnoa.UsePersistentCookie=False&dnoa.receiver=ctl00_Main_yahooLoginButton&dnoa.userSuppliedIdentifier=https%3A%2F%2Fopenid.zing.vn%2Fop%2Fzid&dnoa.return_to_sig_handle=%7B633831495486861389%7D%7BQlUQgA%3D%3D%7D&dnoa.return_to_sig=QbIWxrnRFxgIAYMyAggA2dhkDHMcHqo%2F1p0TCYfAljCFzhHDUFoiD%2Bch5Kr7LkIkQ3VRrokghZt7M0xAjzRQ%2FA%3D%3D&openid.assoc_handle=MkHrHYDppmee_4a5c2578_NKDHgi&openid.claimed_id=https%3A%2F%2Fopenid.zing.vn%2Fop%2Fid%2Fd0917fbecc245e77d9d3e16b6b47dd17&openid.identity=https%3A%2F%2Fopenid.zing.vn%2Fop%2Fid%2Fd0917fbecc245e77d9d3e16b6b47dd17&openid.mode=id_res&openid.ns=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0&openid.op_endpoint=https%3A%2F%2Fopenid.zing.vn%2Fop%2Fen%2Faction&openid.response_nonce=2009-07-14T06%3A29%3A28Zro0Bvm&openid.return_to=http%3A%2F%2Flocalhost%2FOpenID%2Flogin.aspx%3FReturnUrl%3D%252FOpenID%252FMembersOnly%252FDefault.aspx%26dnoa.UsePersistentCookie%3DFalse%26dnoa.receiver%3Dctl00_Main_yahooLoginButton%26dnoa.userSuppliedIdentifier%3Dhttps%253A%252F%252Fopenid.zing.vn%252Fop%252Fzid%26dnoa.return_to_sig_handle%3D%257B633831495486861389%257D%257BQlUQgA%253D%253D%257D%26dnoa.return_to_sig%3DQbIWxrnRFxgIAYMyAggA2dhkDHMcHqo%252F1p0TCYfAljCFzhHDUFoiD%252Bch5Kr7LkIkQ3VRrokghZt7M0xAjzRQ%252FA%253D%253D&openid.sig=McbcRCL%2F3vtbHVKyDtaGyT95Ahc%3D&openid.signed=assoc_handle%2Cclaimed_id%2Cidentity%2Cmode%2Cns%2Cop_endpoint%2Cresponse_nonce%2Creturn_to%2Csigned
>>>
>>>
>>>
>>>
>>>
>>>
>>>
>>> 2009-07-14 13:25:50,624 (GMT+7) [1] INFO  DotNetOpenAuth.Messaging.Channel - Processing incoming PositiveAssertionResponse (2.0) message:
>>> 	openid.claimed_id: https://openid.zing.vn/op/id/d0917fbecc245e77d9d3e16b6b47dd17
>>>
>>>
>>>
>>>
>>>
>>>
>>>
>>> 	openid.identity: https://openid.zing.vn/op/id/d0917fbecc245e77d9d3e16b6b47dd17
>>> 	openid.sig: McbcRCL/3vtbHVKyDtaGyT95Ahc=
>>>
>>>
>>>
>>>
>>>
>>> 	openid.signed: assoc_handle,claimed_id,identity,mode,ns,op_endpoint,response_nonce,return_to,signed
>>>
>>>
>>> 	openid.assoc_handle: MkHrHYDppmee_4a5c2578_NKDHgi
>>> 	openid.op_endpoint: https://openid.zing.vn/op/en/action
>>> 	openid.return_to: http://localhost/OpenID/login.aspx?ReturnUrl=%2FOpenID%2FMembersOnly%2FDefault.aspx&dnoa.UsePersistentCookie=False&dnoa.receiver=ctl00_Main_yahooLoginButton&dnoa.userSuppliedIdentifier=https%3A%2F%2Fopenid.zing.vn%2Fop%2Fzid&dnoa.return_to_sig_handle=%7B633831495486861389%7D%7BQlUQgA%3D%3D%7D&dnoa.return_to_sig=QbIWxrnRFxgIAYMyAggA2dhkDHMcHqo%2F1p0TCYfAljCFzhHDUFoiD%2Bch5Kr7LkIkQ3VRrokghZt7M0xAjzRQ%2FA%3D%3D
>>>
>>>
>>>
>>>
>>>
>>>
>>>
>>> 	openid.response_nonce: 2009-07-14T06:29:28Zro0Bvm
>>> 	openid.mode: id_res
>>> 	openid.ns: http://specs.openid.net/auth/2.0
>>> 	ReturnUrl: /OpenID/MembersOnly/Default.aspx
>>>
>>>
>>>
>>>
>>>
>>>
>>>
>>> 	dnoa.UsePersistentCookie: False
>>> 	dnoa.receiver: ctl00_Main_yahooLoginButton
>>> 	dnoa.userSuppliedIdentifier: https://openid.zing.vn/op/zid
>>> 	dnoa.return_to_sig_handle: {633831495486861389}{QlUQgA==}
>>>
>>>
>>>
>>>
>>>
>>>
>>>
>>> 	dnoa.return_to_sig: QbIWxrnRFxgIAYMyAggA2dhkDHMcHqo/1p0TCYfAljCFzhHDUFoiD+ch5Kr7LkIkQ3VRrokghZt7M0xAjzRQ/A==
>>>
>>> 2009-07-14 13:25:50,640 (GMT+7) [1] ERROR DotNetOpenAuth.Messaging.Bindings - Signature verification failed.
>>>
>>>
>>>
>>>
>>>
>>>
>>>
>>> I don't know why, so can you explain it for me?
>>>
>>> Thank you very much!
>>>
>>> Thân,
>>> NamTV
>>> Tel : 0904646872
>>> Add : 460/4/24 Le Van Luong, Q7, HCM
>>> Homepage : http://namtv.me
>>>
>>> _______________________________________________
>>> general mailing list
>>> general at openid.net
>>> http://openid.net/mailman/listinfo/general
>>>
>>>
>>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openid.net/pipermail/openid-general/attachments/20090714/adf1120a/attachment.htm>


More information about the general mailing list