Hi ZSolt,<div><br></div><div>The OpenID general mailing list probably isn't the optimal place to report interoperability problems. You're welcome to use <a href="mailto:dotnetopenid@googlegroups.com">dotnetopenid@googlegroups.com</a> for this and similar problems involving DNOA in the future.</div>
<div><br></div><div>I just checked out the base64 encoding. The base64 encoding itself seems to be correct:</div><div>byte[] buffer = Convert.FromBase64String(yourBase64String);</div><div>string s = Encoding.UTF8.GetString(buffer);</div>
<div>// s at this point contains Sztupák (that's a capital A with the tilde over it and an upside-down exclamation mark)</div><div><br></div><div>I suspect in your test you may not have been using UTF8.GetString when you saw the incorrect characters. However, those foreign characters very well may be causing the signature problem. The spec tells how this signature should be created, but perhaps myopenid and DNOA implements it differently. I'll keep sniffing and send another reply <b>just to the <a href="mailto:dotnetopenid@googlegroups.com">dotnetopenid@googlegroups.com</a></b> mailing list so as to keep the interop noise down on the openid general mailing list.</div>
<div><br></div><div>--<br>Andrew Arnott<br>"I [may] not agree with what you have to say, but I'll defend to the death your right to say it." - S. G. Tallentyre<br>
<br><br><div class="gmail_quote">2009/6/21 "Sztupák Sz. Zsolt" <span dir="ltr"><<a href="mailto:mail@sztupy.hu">mail@sztupy.hu</a>></span><br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;">
<div bgcolor="#ffffff" text="#000000">
Hi!<br>
<br>
Just created an RP using DotNetOpenAuth mono2 branch (but running on
MS.NET3.5), and I've got the <span>"Login failed: <b>Message</b>
<b>signature</b> <b>was</b> <b>incorrect</b>." error message. I think I've tracked
back the problems to non-ASCII characters in the response string (my
name contains hungarian accented characters -> FAIL, if I remove
them, then SUCCESS)<br>
<br>
I both request sreg (nick,email,fullname) and AX
(nick,first,last,fullname,email) data from myopenid (if I only request
srge and/or ax then it works fine, but then it uses GET imho)<br>
<br>
Here is the log:<br>
assoc_handle: {HMAC-SHA256}{4a3eae39}{WG9ITQ==}<br>
ax.count.alias1: 0<br>
ax.count.alias2: 0<br>
ax.count.alias3: 0<br>
ax.count.alias4: 0<br>
ax.count.alias5: 0<br>
ax.mode: fetch_response<br>
ax.type.alias1: <a href="http://axschema.org/contact/email" target="_blank">http://axschema.org/contact/email</a><br>
ax.type.alias2: <a href="http://axschema.org/namePerson/friendly" target="_blank">http://axschema.org/namePerson/friendly</a><br>
ax.type.alias3: <a href="http://axschema.org/namePerson" target="_blank">http://axschema.org/namePerson</a><br>
ax.type.alias4: <a href="http://axschema.org/namePerson/first" target="_blank">http://axschema.org/namePerson/first</a><br>
ax.type.alias5: <a href="http://axschema.org/namePerson/last" target="_blank">http://axschema.org/namePerson/last</a><br>
claimed_id: <a href="http://sztupy2k.myopenid.com/" target="_blank">http://sztupy2k.myopenid.com/</a><br>
identity: <a href="http://sztupy2k.myopenid.com/" target="_blank">http://sztupy2k.myopenid.com/</a><br>
mode: id_res<br>
ns: <a href="http://specs.openid.net/auth/2.0" target="_blank">http://specs.openid.net/auth/2.0</a><br>
ns.ax: <a href="http://openid.net/srv/ax/1.0" target="_blank">http://openid.net/srv/ax/1.0</a><br>
ns.sreg: <a href="http://openid.net/extensions/sreg/1.1" target="_blank">http://openid.net/extensions/sreg/1.1</a><br>
op_endpoint: <a href="http://www.myopenid.com/server" target="_blank">http://www.myopenid.com/server</a><br>
response_nonce: 2009-06-21T22:03:51ZstfXvT<br>
return_to:
<a href="http://localhost:63995/OpenId/Authenticate?dnoi.userSuppliedIdentifier=http%3a%2f%2fsztupy2k.myopenid.com%2f&dnoi.return_to_sig_handle=%7b633812185973476562%7d%7bMLzXHg%3d%3d%7d&dnoi.return_to_sig=ANbgn54bDTG%2f9cigv0DIsV5LFBRuQTnoG45sqCY5Yv59HYh8gpluby8szbfqSileJ7Nlk5PfmW0DgF1%2fxpAXYw%3d%3d" target="_blank">http://localhost:63995/OpenId/Authenticate?dnoi.userSuppliedIdentifier=http%3a%2f%2fsztupy2k.myopenid.com%2f&dnoi.return_to_sig_handle=%7b633812185973476562%7d%7bMLzXHg%3d%3d%7d&dnoi.return_to_sig=ANbgn54bDTG%2f9cigv0DIsV5LFBRuQTnoG45sqCY5Yv59HYh8gpluby8szbfqSileJ7Nlk5PfmW0DgF1%2fxpAXYw%3d%3d</a><br>
signed:
assoc_handle,ax.count.alias1,ax.count.alias2,ax.count.alias3,ax.count.alias4,ax.count.alias5,ax.mode,ax.type.alias1,ax.type.alias2,ax.type.alias3,ax.type.alias4,ax.type.alias5,claimed_id,identity,mode,ns,ns.ax,ns.sreg,op_endpoint,response_nonce,return_to,signed,sreg.email,sreg.fullname,sreg.nickname<br>
sreg.email: <a href="mailto:mail@sztupy.hu" target="_blank">mail@sztupy.hu</a><br>
sreg.fullname: Zsolt Sz. SztupA!k<br>
sreg.nickname: SztupY<br>
<br>
Base64 representation of signed data:
YXNzb2NfaGFuZGxlOntITUFDLVNIQTI1Nn17NGEzZWFlMzl9e1dHOUlUUT09fQpheC5jb3VudC5hbGlhczE6MApheC5jb3VudC5hbGlhczI6MApheC5jb3VudC5hbGlhczM6MApheC5jb3VudC5hbGlhczQ6MApheC5jb3VudC5hbGlhczU6MApheC5tb2RlOmZldGNoX3Jlc3BvbnNlCmF4LnR5cGUuYWxpYXMxOmh0dHA6Ly9heHNjaGVtYS5vcmcvY29udGFjdC9lbWFpbApheC50eXBlLmFsaWFzMjpodHRwOi8vYXhzY2hlbWEub3JnL25hbWVQZXJzb24vZnJpZW5kbHkKYXgudHlwZS5hbGlhczM6aHR0cDovL2F4c2NoZW1hLm9yZy9uYW1lUGVyc29uCmF4LnR5cGUuYWxpYXM0Omh0dHA6Ly9heHNjaGVtYS5vcmcvbmFtZVBlcnNvbi9maXJzdApheC50eXBlLmFsaWFzNTpodHRwOi8vYXhzY2hlbWEub3JnL25hbWVQZXJzb24vbGFzdApjbGFpbWVkX2lkOmh0dHA6Ly9zenR1cHkyay5teW9wZW5pZC5jb20vCmlkZW50aXR5Omh0dHA6Ly9zenR1cHkyay5teW9wZW5pZC5jb20vCm1vZGU6aWRfcmVzCm5zOmh0dHA6Ly9zcGVjcy5vcGVuaWQubmV0L2F1dGgvMi4wCm5zLmF4Omh0dHA6Ly9vcGVuaWQubmV0L3Nydi9heC8xLjAKbnMuc3JlZzpodHRwOi8vb3BlbmlkLm5ldC9leHRlbnNpb25zL3NyZWcvMS4xCm9wX2VuZHBvaW50Omh0dHA6Ly93d3cubXlvcGVuaWQuY29tL3NlcnZlcgpyZXNwb25zZV9ub25jZToyMDA5LTA2LTIxVDIyOjAzOjUxWnN0Zlh2VApyZXR1cm5fdG86aHR0cDovL2xvY2FsaG9zdDo2Mzk5NS9Pc
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<br>
Signature: 5OvxE4wy/3hhqM3eZlU4gNdP51kxWjCEalbgLh/pZeU=<br>
<br>
decoding the Base64 representation shows, that my sreg.fullname is
corrupted (sreg.fullname:Zsolt Sz. SztupĂƒÂˇk instead of </span><span>Zsolt
Sz. SztupA!k</span><span>) in the signed data. If I change my fullname
at myopenid to not contain accented characters then everything is fine.<br>
<br>
SztupY (Zsolt Sz. Sztupák)<br>
</span>
</div>
<br>_______________________________________________<br>
general mailing list<br>
<a href="mailto:general@openid.net">general@openid.net</a><br>
<a href="http://openid.net/mailman/listinfo/general" target="_blank">http://openid.net/mailman/listinfo/general</a><br>
<br></blockquote></div><br></div>