<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html;charset=ISO-8859-1" http-equiv="Content-Type">
</head>
<body bgcolor="#ffffff" text="#000000">
Hi Shane, <br>
<br>
The Yahoo OP does not support HMAC-SHA256 nor DH-SHA256, and thanks for
pointing out that our error response is not correct. We'll fix this
soon.<br>
<br>
Thanks<br>
Allen<br>
<br>
<br>
Shane B Weeden wrote:
<blockquote
cite="mid:OF1A9E33E0.F318B548-ON4A2573E5.0015455C-4A2573E5.0015CE63@au1.ibm.com"
type="cite"><br>
<font face="sans-serif" size="2">In case anyone from Yahoo is on the
list, I have encountered a problem with the associate method
implementation.
</font><br>
<br>
<font face="sans-serif" size="2">If an associate request is sent with
the HMAC-SHA256 association type and DH-SHA256 session type, the Yahoo
OP (at <a class="moz-txt-link-freetext" href="https://open.login.yahooapis.com/openid/op/auth">https://open.login.yahooapis.com/openid/op/auth</a>) is returning
the
following response:</font>
<br>
<br>
<font face="sans-serif" size="2">ns:<a class="moz-txt-link-freetext" href="http://specs.openid.net/auth/2.0">http://specs.openid.net/auth/2.0</a></font>
<br>
<font face="sans-serif" size="2">mode:error</font>
<br>
<font face="sans-serif" size="2">error:assoc_type not supported</font>
<br>
<font face="sans-serif" size="2">error_code:unsupported-type</font>
<br>
<font face="sans-serif" size="2">session_type:HMAC-SHA1</font>
<br>
<font face="sans-serif" size="2">assoc_type:no-encryption</font>
<br>
<br>
<br>
<font face="sans-serif" size="2">I think you'll find the values for
the
assoc_type and session_type should be swapped.</font>
<br>
<br>
<pre wrap="">
<hr size="4" width="90%">
_______________________________________________
general mailing list
<a class="moz-txt-link-abbreviated" href="mailto:general@openid.net">general@openid.net</a>
<a class="moz-txt-link-freetext" href="http://openid.net/mailman/listinfo/general">http://openid.net/mailman/listinfo/general</a>
</pre>
</blockquote>
<br>
</body>
</html>