[OpenID] Interoperability problem with OpenID POST response between myopenid and Google

["Sztupák Sz. Zsolt"]

Hi!

Just created an RP using DotNetOpenAuth mono2 branch (but running on 
MS.NET3.5), and I've got the "Login failed: *Message* *signature* *was* 
*incorrect*." error message. I think I've tracked back the problems to 
non-ASCII characters in the response string (my name contains hungarian 
accented characters -> FAIL, if I remove them, then SUCCESS)

I both request sreg (nick,email,fullname) and AX 
(nick,first,last,fullname,email) data from myopenid (if I only request 
srge and/or ax then it works fine, but then it uses GET imho)

Here is the log:
     assoc_handle: {HMAC-SHA256}{4a3eae39}{WG9ITQ==}
     ax.count.alias1: 0
     ax.count.alias2: 0
     ax.count.alias3: 0
     ax.count.alias4: 0
     ax.count.alias5: 0
     ax.mode: fetch_response
     ax.type.alias1: http://axschema.org/contact/email
     ax.type.alias2: http://axschema.org/namePerson/friendly
     ax.type.alias3: http://axschema.org/namePerson
     ax.type.alias4: http://axschema.org/namePerson/first
     ax.type.alias5: http://axschema.org/namePerson/last
     claimed_id: http://sztupy2k.myopenid.com/
     identity: http://sztupy2k.myopenid.com/
     mode: id_res
     ns: http://specs.openid.net/auth/2.0
     ns.ax: http://openid.net/srv/ax/1.0
     ns.sreg: http://openid.net/extensions/sreg/1.1
     op_endpoint: http://www.myopenid.com/server
     response_nonce: 2009-06-21T22:03:51ZstfXvT
     return_to: 
http://localhost:63995/OpenId/Authenticate?dnoi.userSuppliedIdentifier=http%3a%2f%2fsztupy2k.myopenid.com%2f&dnoi.return_to_sig_handle=%7b633812185973476562%7d%7bMLzXHg%3d%3d%7d&dnoi.return_to_sig=ANbgn54bDTG%2f9cigv0DIsV5LFBRuQTnoG45sqCY5Yv59HYh8gpluby8szbfqSileJ7Nlk5PfmW0DgF1%2fxpAXYw%3d%3d
     signed: 
assoc_handle,ax.count.alias1,ax.count.alias2,ax.count.alias3,ax.count.alias4,ax.count.alias5,ax.mode,ax.type.alias1,ax.type.alias2,ax.type.alias3,ax.type.alias4,ax.type.alias5,claimed_id,identity,mode,ns,ns.ax,ns.sreg,op_endpoint,response_nonce,return_to,signed,sreg.email,sreg.fullname,sreg.nickname
     sreg.email: mail at sztupy.hu
     sreg.fullname: Zsolt Sz. SztupA!k
     sreg.nickname: SztupY

Base64 representation of signed data: 
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
Signature: 5OvxE4wy/3hhqM3eZlU4gNdP51kxWjCEalbgLh/pZeU=

decoding the Base64 representation shows, that my sreg.fullname is 
corrupted (sreg.fullname:Zsolt Sz. Sztup�¡k instead of Zsolt Sz. 
SztupA!k) in the signed data. If I change my fullname at myopenid to not 
contain accented characters then everything is fine.

  SztupY (Zsolt Sz. Sztupák)
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openid.net/pipermail/openid-general/attachments/20090622/a3be8f62/attachment.htm>