search

IdentityPython / pysaml2

Python implementation of SAML2
Apache License 2.0
554 stars 421 forks source link

TypeError: sequence item 1: expected str instance, tuple found #844

Closed shardulkumar79 closed 2 years ago

shardulkumar79 commented 2 years ago

Code Version

Request --node-id id-DcdJuv54VGbvvbKK9 --output /tmp/tmpn_4c9fyo.xml /tmp/tmp3favnshn.xml
[2021-12-09 21:11:27,591] [INFO] [saml2.request._loads] Request message: <ns0:AuthnRequest xmlns:ns0="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:ns1="urn:oasis:names:tc:SAML:2.0:assertion" xmlns:ns2="http://www.w3.org/2000/09/xmldsig#" ID="id-DcdJuv54VGbvvbKK9" Version="2.0" IssueInstant="2021-12-09T15:41:27Z" Destination="https://localhost:8088/sso/redirect" ProtocolBinding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" AssertionConsumerServiceURL="http://localhost:8087/acs/post"><ns1:Issuer Format="urn:oasis:names:tc:SAML:2.0:nameid-format:entity">http://localhost:8087/sp.xml</ns1:Issuer><ns2:Signature Id="Signature1"><ns2:SignedInfo><ns2:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#" /><ns2:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1" /><ns2:Reference URI="#id-DcdJuv54VGbvvbKK9"><ns2:Transforms><ns2:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature" /><ns2:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#" /></ns2:Transforms><ns2:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1" /><ns2:DigestValue>ltMvferQbfiVMhR8Ai2agnhn4DU=</ns2:DigestValue></ns2:Reference></ns2:SignedInfo><ns2:SignatureValue>LyZTg5z9QlB3kY7XGurdbzHVZSxS8vIfLJp9J4T0kWG8n9bICvJ10KU0cXJxGbKR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</ns2:SignatureValue><ns2:KeyInfo><ns2:X509Data><ns2:X509Certificate>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</ns2:X509Certificate></ns2:X509Data></ns2:KeyInfo></ns2:Signature><ns0:NameIDPolicy Format="urn:oasis:names:tc:SAML:2.0:nameid-format:persistent" AllowCreate="false" /></ns0:AuthnRequest>
[2021-12-09 21:11:27,626] [DEBUG] [saml2.entity._parse_request] Loaded request
[2021-12-09 21:11:27,630] [DEBUG] [saml2.entity._parse_request] Verified request
TypeError('sequence item 1: expected str instance, tuple found')
Traceback (most recent call last):
  File "./idp.py", line 405, in redirect
    _key = saml_msg["key"]
KeyError: 'key'

During handling of the above exception, another exception occurred:

Traceback (most recent call last):
  File "/home/shardul/.local/lib/python3.8/site-packages/cheroot/server.py", line 1287, in communicate
    req.respond()
  File "/home/shardul/.local/lib/python3.8/site-packages/cheroot/server.py", line 1077, in respond
    self.server.gateway(self).respond()
  File "/home/shardul/.local/lib/python3.8/site-packages/cheroot/wsgi.py", line 140, in respond
    response = self.req.server.wsgi_app(self.env, self.start_response)
  File "./idp.py", line 1084, in application
    return func()
  File "./idp.py", line 430, in redirect
    if verify_redirect_signature(saml_msg, IDP.sec.sec_backend, cert):
  File "/usr/local/lib/python3.8/dist-packages/pysaml2-7.1.0-py3.8.egg/saml2/sigver.py", line 619, in verify_redirect_signature
    _key = extract_rsa_key_from_x509_cert(pem_format(cert))
  File "/usr/local/lib/python3.8/dist-packages/pysaml2-7.1.0-py3.8.egg/saml2/sigver.py", line 484, in pem_format
    return os.linesep.join([
TypeError: sequence item 1: expected str instance, tuple found
omidraha commented 2 years ago

Same issue, This is second error after I run example successfully and visit this address:

http://localhost:8087/

Traceback:

[2022-01-02 21:09:54,571] [INFO] [saml2.idp.application] <application> PATH: sso/redirect
[2022-01-02 21:09:54,571] [INFO] [saml2.idp.application] = KAKA =
[2022-01-02 21:09:54,571] [DEBUG] [saml2.idp.info_from_cookie] KAKA: sc=RZhqIAejAsjTSGu5wvucp6q9iCas1yXVHO8PY6FPbLoExEXieyo4S0D25ABBeQN3
[2022-01-02 21:09:54,572] [DEBUG] [saml2.idp.info_from_cookie] No idpauthn cookie
[2022-01-02 21:09:54,572] [INFO] [saml2.idp.application] -- No USER --
[2022-01-02 21:09:54,572] [DEBUG] [saml2.idp.application] Callback: (<class '__main__.SSO'>, 'redirect')
[2022-01-02 21:09:54,572] [DEBUG] [saml2.idp.__init__] ENVIRON: {'ACTUAL_SERVER_PROTOCOL': 'HTTP/1.1', 'PATH_INFO': '/sso/redirect', 'QUERY_STRING': 'SAMLRequest=nVdXk6NIEn7vX9GhfVTM4CQkOrbnonDCC%2B%2FeEN4jjJD49Ud379iY29jbNzIr7VdJZuWf%2F7nX1fMt7oe8bV43yGd4858vT382A%2FwCpjFr9Pg6xcP4vEo1w8vKft1MffPSBkO%2BkkEdDy9j%2BGIAWXpBP8MvXd%2BObdhWm28KyN8rBMMQ9%2BPq%2B7sG%2BrrJxrF7gaB5nj%2FP2Oe2TyEUhmEIJqBVKBry9I%2FNM0%2B%2FbvLoU9It7R6%2B1KPPMsm4YMPm2f6azepglRuGKeabYQyacWXBKPoJRj7BqIkcXjDiZb%2FzN8%2F0mmLeBOO71pvzYfVetWFQZe0wvhzh4xEahhbq4yjv43DcPKt%2FJUrmTZQ36d8nefkQGl4401Q%2FqWfD3DyDr4lTbTNMddwbcX%2FLw9jSpW%2F5%2FxTBAQrCAepWavNlvR%2Fk5T2x%2Fplt%2BzoY%2Fz6AN84bVu%2BiL3Ez5uNj8%2BX3Xobu8wryn9B3F2%2Fu0BcjT1eEpj5%2B5qPXzTcK2Xw%2FjiO%2BSdoPmgqatslXy%2Fnyjqscj1kbPYMqbft8zOr%2FcckIhMBvl%2FwpvoefQmTX%2FLGBfvH%2FDy39VC79EHwasgD5akyPk7iPmzB%2BtnT%2BdfPHbwvpQ9Tsg2Z4Q274hf7%2FIoibW1y1XRx9Gr4m8jWYf27x9%2BhAvwuTztO1qP8NVj%2Fi9GHFDqop%2FuKZ6AVArLEoGCkRzlarkca3OGpk%2BdePGH6U%2FuB8w%2Fkv%2Btcq%2BXapH0pGFUopyepWXzbSbpzP7QO3zaag6b06YXWx03SfdCOKo5R9lmXnK%2BXQQnFRz1MjxcgBfTpxyKGDKzDZRzWxe%2B1iySyhJbe8EkeiS3hxHr1jGgm6qCoWv8cymbECCh%2FJ%2BBJQqN88HYMt6s0hHZQ1Mjj8jYhLJe2kEMvQdM5Exk6Xig%2BrKVtVuJPCH1RThIiJn8RmTw5n%2FsmeZD1OUfGGMD0%2BJQ4LTtU2c3YcbIRV43gPHc4bRWhRFphLEUz8HcIWLM5uCudYLJY%2FJdMCRBpr6kacTkUXLh3Md8cdsK7Etg%2F63uHJctCX0wOxIh4LcuW0u5s8IzEkmurC0D4xdEQLEjmVA0ZJRi75CnRDribGkFTgqAfiMT6yzGHpVprYTKb1IbqgGb6vzywf7JGFfnLjwzFfMoXqMrS7p4UOlkup2U5WLYArdBEHVesP46KaxUn1gK4WkKUrQ46Tg5PGqv205cg2RA9FMCocg28jPEi4EcF6SqDbQLpJR1q3aj7PAw3hqOBEOAwhIexeoE0tiWygPyXh1kC5eGL1E3lDwvzkO1qDzivgMGHoMxcyDb6khuXtjw%2BMavDgKhCV4uQjcu1Gt%2BqeAqkuUktszfBeHY1DWTxUNd8K%2Bja3kRFP5hhyg2xwEoXomBAzFHk2Gry8%2BqMuoa1S6E%2F0SJXxWZkru46yoBOTnXnhWtzQ2IsrVflFlgcEoEKnePLr99L%2BoZTfy1uMH99r3d3DBB2MwXeKepsAydokx%2FiLzPNsYVIUwJwUzDwJUt5Sr8pxT9r7WBh6xjnyCtrbfMidqtyaac0TxNbns1uoAI2RSA3MtslIMihPALEYMpMp25bv1AIEMlXs1aAMqoiUdTDTqUfbmsbRIDJ9h4Wj072S9XY%2BgXe%2BSJPsHLtKdnHmB8%2Fo1cU5phpqPyL6u31qninD1tZIQ0UumLtMA0ym01lZGMTJUnXlPWSTmeWFmc9vZ6YdyKz1QzyeCSrblLVhprR3vzwNBFczGU0Gu48c5pmzUDuLOH3wTSaQyfTDdzrrIVctnoMMck4yvoPceEapwkb7wf6whlpZK64UXwCFTMtrVuYnYobJFS8WgDMF0iN4O6dScf1mwOTMEHr2aP6MdcB%2FaKwWRGenOWdQXl0dN8JxGUtpbEzG7fKIcpTXTavLsqq3awk6WL1TcF7SkxcWt%2Foqn29uUqQRQ%2BkA4EsuV8sl3Ooed50RN9MhD6HvHGJjZ7%2FOo4AjsTYfEjfGjzf0WJpcc4Xzk1bkt1IPZMd3e9nQkrUr7X1twTmKQOn0Ppzd0DDlimJMpVpyJi9RCtrVGSDwbjt1mtoCCosJujlUimWgrWBCoU%2BmqXAeJSO0ceqx3LbldkJlaoqiJW569qxwZHyQFctj0gPXEtYYDNgD73oOw%2F15AP1oqZ0yk36vVHbcsDGL95ZyhO%2BZqMy3bqxc7QqoLarw2dR4qaK3Flc%2F9m13IoWuuD7gEsHLbRCE6Eh4kBRutT2qGtnejzGK4Ls9dW%2FvAM%2Fk8sD7JlJ2g1XhU3hkSZcwpNXajT9Tux4JmuDOB32sFXpwQfN5G%2BiZWYvVyXCXKjBkA2V9uTPh6wGLoJ5tEUgXYwaNlhOxYry2Jlcwb3tY2Hk7XGchHKJg0rmbYIlIVSsQfi86tu0S7uSXlXHJxBs0nBT3rsb7bp%2FpRD%2BPaEv1IOMW1l%2BiqF940tZz3BrTRpXTY1k1VsgN9HiIK2oCLNpO5M4%2Fel11zzJPSANMSaSac70Z0Q8qyaJWtGONtCyoMyQz0JZNH5YIghN%2BFUk5xlhhmdwww5DdVUe2yN3cMhSYGQACxZRZZube%2Fh8dPpOkx7D8HLhkcpbwILLMe5feIEU4%2BVgq9bxMHt%2F%2Bn4ifNU8mA%2FC3suBDlpkZEpo1VgYyCZLj7%2FoOnaZrv%2BJ3hnY3i0K52QeGgDELqpAuOqjt4yYT0j30yropzJO8zgYRgbhLZ6GHgfC5oo0S81CWyCRTGT7eD%2BUUGJfWcQnSPRpROibF0SOy4UBednJmcthVwCT2JKIRLKXitjJZRR%2Frh5Aw96SmQzeHvPMW5u0Iq8UdQSanqFOOlXkQizG8WOUuPV9O0qRA7okyC1atH7wuJKkv4qXkDOWYRVEb7C7xdelsrbk0e5McjWyplrovamvv5bG63%2FGt5tILs6%2BdZqeykzz4xExJoTHrXq5iiSWfKCob8N2KzcQXvkce7xVGceLdlydCzLcRp6EO4iLWo10Wdp8jhNFnduS51VTbZwMvGlD4kKXwBlJ7lF%2FugXksxoEiy7RW6swPLhipXKSykhYUeDmRdDzllVyco4lXAU50VdZnRZ6rT1h97dKJaKjqEVd9oQ%2F3W38rhR2dQ4HqY1ew5WEYn7zZzLfKIOGxS2a8ak0AUrjgvsfKRTAcCISFnhlin4uRcaW3lXRute1C%2BI3vxqRIOcvJIi6hbJXIHe0EQSD5AxAo6HwBF4GmRq2PfZ%2FZTlsKkFk5XyS1dO5HPzWIAIZS0q55AdtdB7vub%2FDANSUiaC1byoqJtlpNTS1ADtyYXO%2BnB6NSd0aYoPKaitj6rBPTCJEZdecdMBZ%2F2GPOOM3QPXahdu3xjiPXZkdfiluM06oy8DJScCdr0D8G9q8T%2BDv3Y0pDP03wn2f8l%2FcNWVnXKp5W2yoPH%2F9iD%2Bve9tRhXNexdR2sqnam%2BngN5HWTBNUQ%2F%2FWy%2F3kP%2F%2FL0Xw%3D%3D&RelayState=xS8oZWhGcxK8paES&SigAlg=http%3A%2F%2Fwww.w3.org%2F2000%2F09%2Fxmldsig%23rsa-sha1&Signature=aHNoLcw9MgT%2FPua0zgHFRH6i6q6S6cyKq%2B7oxeXMx3rTmlDrA9IwV7B%2B0Z4FbNqFHWGhtApY4ZRedogt72VwwPwU1%2FxaAdjUi6tiZ40DGuuCNuVqmKSvRecAKxJ%2ByNQUe4FZu7VDM%2BjrXSfkEX%2FgcDEyMd4yu9WwAZEgDmrcxh1cIN5Xa2df1RDiEV0Zb9QowIu86XT2tRPZGE9q7fT4liY%2FkqTLzsDXFRkeoP56B%2ByBdUb0eG5TUWTUtvzARdmmC6TUM0RGu84x6XjlSwXdXFmHTJDeuBTvzdE0LHZuuC1vqEbiz45nLrXXzGumELdAlZPxsQCjxPFkHFWpY2vaDcpYALi4h6pAX904r2h3oEuo%2Bayntn1L7p3Kzq8lduTMwppb74tEm0iiU6VX9hQC3vP8FVxnd0V23dmGXyjVAD9OgfVK5FQNOGo2cx%2BFshI%2B9d4E%2BFs4fwUrUHdJz0zcbKHqI4A5GeV4WigecwQ82zfAcvViyV72CwPM16vYsvehjMk2K1A38%2BUhxU6jqJwVYOaPPHvCnjDDLnQSoOJa13aEyAxUP06NMFSY7%2Bf%2FXKwVIVdrvDbyv000JcYigHGhhVhe0%2BaG9mrXDdWX8atUrWWQOZJbUIh5K2mT0iEk%2BY6Nkg%2FRq20aLTrvje61VFq3abb6QnPYq%2Fc2nJSeo9Nhgb8%3D', 'REMOTE_ADDR': '127.0.0.1', 'REMOTE_PORT': '48782', 'REQUEST_METHOD': 'GET', 'REQUEST_URI': '/sso/redirect?SAMLRequest=nVdXk6NIEn7vX9GhfVTM4CQkOrbnonDCC%2B%2FeEN4jjJD49Ud379iY29jbNzIr7VdJZuWf%2F7nX1fMt7oe8bV43yGd4858vT382A%2FwCpjFr9Pg6xcP4vEo1w8vKft1MffPSBkO%2BkkEdDy9j%2BGIAWXpBP8MvXd%2BObdhWm28KyN8rBMMQ9%2BPq%2B7sG%2BrrJxrF7gaB5nj%2FP2Oe2TyEUhmEIJqBVKBry9I%2FNM0%2B%2FbvLoU9It7R6%2B1KPPMsm4YMPm2f6azepglRuGKeabYQyacWXBKPoJRj7BqIkcXjDiZb%2FzN8%2F0mmLeBOO71pvzYfVetWFQZe0wvhzh4xEahhbq4yjv43DcPKt%2FJUrmTZQ36d8nefkQGl4401Q%2FqWfD3DyDr4lTbTNMddwbcX%2FLw9jSpW%2F5%2FxTBAQrCAepWavNlvR%2Fk5T2x%2Fplt%2BzoY%2Fz6AN84bVu%2BiL3Ez5uNj8%2BX3Xobu8wryn9B3F2%2Fu0BcjT1eEpj5%2B5qPXzTcK2Xw%2FjiO%2BSdoPmgqatslXy%2Fnyjqscj1kbPYMqbft8zOr%2FcckIhMBvl%2FwpvoefQmTX%2FLGBfvH%2FDy39VC79EHwasgD5akyPk7iPmzB%2BtnT%2BdfPHbwvpQ9Tsg2Z4Q274hf7%2FIoibW1y1XRx9Gr4m8jWYf27x9%2BhAvwuTztO1qP8NVj%2Fi9GHFDqop%2FuKZ6AVArLEoGCkRzlarkca3OGpk%2BdePGH6U%2FuB8w%2Fkv%2Btcq%2BXapH0pGFUopyepWXzbSbpzP7QO3zaag6b06YXWx03SfdCOKo5R9lmXnK%2BXQQnFRz1MjxcgBfTpxyKGDKzDZRzWxe%2B1iySyhJbe8EkeiS3hxHr1jGgm6qCoWv8cymbECCh%2FJ%2BBJQqN88HYMt6s0hHZQ1Mjj8jYhLJe2kEMvQdM5Exk6Xig%2BrKVtVuJPCH1RThIiJn8RmTw5n%2FsmeZD1OUfGGMD0%2BJQ4LTtU2c3YcbIRV43gPHc4bRWhRFphLEUz8HcIWLM5uCudYLJY%2FJdMCRBpr6kacTkUXLh3Md8cdsK7Etg%2F63uHJctCX0wOxIh4LcuW0u5s8IzEkmurC0D4xdEQLEjmVA0ZJRi75CnRDribGkFTgqAfiMT6yzGHpVprYTKb1IbqgGb6vzywf7JGFfnLjwzFfMoXqMrS7p4UOlkup2U5WLYArdBEHVesP46KaxUn1gK4WkKUrQ46Tg5PGqv205cg2RA9FMCocg28jPEi4EcF6SqDbQLpJR1q3aj7PAw3hqOBEOAwhIexeoE0tiWygPyXh1kC5eGL1E3lDwvzkO1qDzivgMGHoMxcyDb6khuXtjw%2BMavDgKhCV4uQjcu1Gt%2BqeAqkuUktszfBeHY1DWTxUNd8K%2Bja3kRFP5hhyg2xwEoXomBAzFHk2Gry8%2BqMuoa1S6E%2F0SJXxWZkru46yoBOTnXnhWtzQ2IsrVflFlgcEoEKnePLr99L%2BoZTfy1uMH99r3d3DBB2MwXeKepsAydokx%2FiLzPNsYVIUwJwUzDwJUt5Sr8pxT9r7WBh6xjnyCtrbfMidqtyaac0TxNbns1uoAI2RSA3MtslIMihPALEYMpMp25bv1AIEMlXs1aAMqoiUdTDTqUfbmsbRIDJ9h4Wj072S9XY%2BgXe%2BSJPsHLtKdnHmB8%2Fo1cU5phpqPyL6u31qninD1tZIQ0UumLtMA0ym01lZGMTJUnXlPWSTmeWFmc9vZ6YdyKz1QzyeCSrblLVhprR3vzwNBFczGU0Gu48c5pmzUDuLOH3wTSaQyfTDdzrrIVctnoMMck4yvoPceEapwkb7wf6whlpZK64UXwCFTMtrVuYnYobJFS8WgDMF0iN4O6dScf1mwOTMEHr2aP6MdcB%2FaKwWRGenOWdQXl0dN8JxGUtpbEzG7fKIcpTXTavLsqq3awk6WL1TcF7SkxcWt%2Foqn29uUqQRQ%2BkA4EsuV8sl3Ooed50RN9MhD6HvHGJjZ7%2FOo4AjsTYfEjfGjzf0WJpcc4Xzk1bkt1IPZMd3e9nQkrUr7X1twTmKQOn0Ppzd0DDlimJMpVpyJi9RCtrVGSDwbjt1mtoCCosJujlUimWgrWBCoU%2BmqXAeJSO0ceqx3LbldkJlaoqiJW569qxwZHyQFctj0gPXEtYYDNgD73oOw%2F15AP1oqZ0yk36vVHbcsDGL95ZyhO%2BZqMy3bqxc7QqoLarw2dR4qaK3Flc%2F9m13IoWuuD7gEsHLbRCE6Eh4kBRutT2qGtnejzGK4Ls9dW%2FvAM%2Fk8sD7JlJ2g1XhU3hkSZcwpNXajT9Tux4JmuDOB32sFXpwQfN5G%2BiZWYvVyXCXKjBkA2V9uTPh6wGLoJ5tEUgXYwaNlhOxYry2Jlcwb3tY2Hk7XGchHKJg0rmbYIlIVSsQfi86tu0S7uSXlXHJxBs0nBT3rsb7bp%2FpRD%2BPaEv1IOMW1l%2BiqF940tZz3BrTRpXTY1k1VsgN9HiIK2oCLNpO5M4%2Fel11zzJPSANMSaSac70Z0Q8qyaJWtGONtCyoMyQz0JZNH5YIghN%2BFUk5xlhhmdwww5DdVUe2yN3cMhSYGQACxZRZZube%2Fh8dPpOkx7D8HLhkcpbwILLMe5feIEU4%2BVgq9bxMHt%2F%2Bn4ifNU8mA%2FC3suBDlpkZEpo1VgYyCZLj7%2FoOnaZrv%2BJ3hnY3i0K52QeGgDELqpAuOqjt4yYT0j30yropzJO8zgYRgbhLZ6GHgfC5oo0S81CWyCRTGT7eD%2BUUGJfWcQnSPRpROibF0SOy4UBednJmcthVwCT2JKIRLKXitjJZRR%2Frh5Aw96SmQzeHvPMW5u0Iq8UdQSanqFOOlXkQizG8WOUuPV9O0qRA7okyC1atH7wuJKkv4qXkDOWYRVEb7C7xdelsrbk0e5McjWyplrovamvv5bG63%2FGt5tILs6%2BdZqeykzz4xExJoTHrXq5iiSWfKCob8N2KzcQXvkce7xVGceLdlydCzLcRp6EO4iLWo10Wdp8jhNFnduS51VTbZwMvGlD4kKXwBlJ7lF%2FugXksxoEiy7RW6swPLhipXKSykhYUeDmRdDzllVyco4lXAU50VdZnRZ6rT1h97dKJaKjqEVd9oQ%2F3W38rhR2dQ4HqY1ew5WEYn7zZzLfKIOGxS2a8ak0AUrjgvsfKRTAcCISFnhlin4uRcaW3lXRute1C%2BI3vxqRIOcvJIi6hbJXIHe0EQSD5AxAo6HwBF4GmRq2PfZ%2FZTlsKkFk5XyS1dO5HPzWIAIZS0q55AdtdB7vub%2FDANSUiaC1byoqJtlpNTS1ADtyYXO%2BnB6NSd0aYoPKaitj6rBPTCJEZdecdMBZ%2F2GPOOM3QPXahdu3xjiPXZkdfiluM06oy8DJScCdr0D8G9q8T%2BDv3Y0pDP03wn2f8l%2FcNWVnXKp5W2yoPH%2F9iD%2Bve9tRhXNexdR2sqnam%2BngN5HWTBNUQ%2F%2FWy%2F3kP%2F%2FL0Xw%3D%3D&RelayState=xS8oZWhGcxK8paES&SigAlg=http%3A%2F%2Fwww.w3.org%2F2000%2F09%2Fxmldsig%23rsa-sha1&Signature=aHNoLcw9MgT%2FPua0zgHFRH6i6q6S6cyKq%2B7oxeXMx3rTmlDrA9IwV7B%2B0Z4FbNqFHWGhtApY4ZRedogt72VwwPwU1%2FxaAdjUi6tiZ40DGuuCNuVqmKSvRecAKxJ%2ByNQUe4FZu7VDM%2BjrXSfkEX%2FgcDEyMd4yu9WwAZEgDmrcxh1cIN5Xa2df1RDiEV0Zb9QowIu86XT2tRPZGE9q7fT4liY%2FkqTLzsDXFRkeoP56B%2ByBdUb0eG5TUWTUtvzARdmmC6TUM0RGu84x6XjlSwXdXFmHTJDeuBTvzdE0LHZuuC1vqEbiz45nLrXXzGumELdAlZPxsQCjxPFkHFWpY2vaDcpYALi4h6pAX904r2h3oEuo%2Bayntn1L7p3Kzq8lduTMwppb74tEm0iiU6VX9hQC3vP8FVxnd0V23dmGXyjVAD9OgfVK5FQNOGo2cx%2BFshI%2B9d4E%2BFs4fwUrUHdJz0zcbKHqI4A5GeV4WigecwQ82zfAcvViyV72CwPM16vYsvehjMk2K1A38%2BUhxU6jqJwVYOaPPHvCnjDDLnQSoOJa13aEyAxUP06NMFSY7%2Bf%2FXKwVIVdrvDbyv000JcYigHGhhVhe0%2BaG9mrXDdWX8atUrWWQOZJbUIh5K2mT0iEk%2BY6Nkg%2FRq20aLTrvje61VFq3abb6QnPYq%2Fc2nJSeo9Nhgb8%3D', 'SCRIPT_NAME': '', 'SERVER_NAME': 'Cheroot/8.5.2', 'SERVER_PROTOCOL': 'HTTP/1.1', 'SERVER_SOFTWARE': 'Cheroot/8.5.2 Server', 'wsgi.errors': <_io.TextIOWrapper name='<stderr>' mode='w' encoding='utf-8'>, 'wsgi.input': <cheroot.server.KnownLengthRFile object at 0x7ff8302abd60>, 'wsgi.input_terminated': False, 'wsgi.multiprocess': False, 'wsgi.multithread': True, 'wsgi.run_once': False, 'wsgi.url_scheme': 'https', 'wsgi.version': (1, 0), 'SERVER_PORT': '8088', 'HTTP_HOST': 'localhost:8088', 'HTTP_USER_AGENT': 'Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:95.0) Gecko/20100101 Firefox/95.0', 'HTTP_ACCEPT': 'text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8', 'HTTP_ACCEPT_LANGUAGE': 'en-US,en;q=0.5', 'HTTP_ACCEPT_ENCODING': 'gzip, deflate, br', 'HTTP_DNT': '1', 'HTTP_CONNECTION': 'keep-alive', 'HTTP_COOKIE': 'sc=RZhqIAejAsjTSGu5wvucp6q9iCas1yXVHO8PY6FPbLoExEXieyo4S0D25ABBeQN3', 'HTTP_UPGRADE_INSECURE_REQUESTS': '1', 'HTTP_SEC_FETCH_DEST': 'document', 'HTTP_SEC_FETCH_MODE': 'navigate', 'HTTP_SEC_FETCH_SITE': 'none', 'HTTP_SEC_FETCH_USER': '?1', 'HTTPS': 'on', 'SSL_PROTOCOL': 'TLSv1.3', 'SSL_CIPHER': 'TLS_AES_256_GCM_SHA384', 'SSL_CIPHER_EXPORT': '', 'SSL_CIPHER_USEKEYSIZE': 256, 'SSL_VERSION_INTERFACE': 'Cheroot/8.5.2 Python/3.8.10 (default, Nov 26 2021, 20:14:08) \n[GCC 9.3.0]', 'SSL_VERSION_LIBRARY': 'OpenSSL 1.1.1f  31 Mar 2020', 'SSL_CLIENT_VERIFY': 'NONE', 'SSL_SESSION_ID': 'f983a408c3b611e510b5ab21a6274f438f7d2106ccc2ec352d115b104f71af5f', 'SSL_CIPHER_ALGKEYSIZE': 256, 'SSL_TLS_SNI': 'localhost', 'myapp.url_args': 'sso/redirect'}
[2022-01-02 21:09:54,572] [INFO] [saml2.idp.redirect] --- In SSO Redirect ---
[2022-01-02 21:09:54,572] [DEBUG] [saml2.entity._parse_request] receiver addresses: ['https://localhost:8088/sso/redirect']
[2022-01-02 21:09:54,572] [DEBUG] [saml2.entity._parse_request] Binding: urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect
[2022-01-02 21:09:54,572] [DEBUG] [saml2.request._loads] xmlstr: b'<?xml version="1.0"?>\n<ns0:AuthnRequest xmlns:ns0="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:ns1="urn:oasis:names:tc:SAML:2.0:assertion" xmlns:ns2="http://www.w3.org/2000/09/xmldsig#" ID="id-fpzo50bmtZFEftz3s" Version="2.0" IssueInstant="2022-01-02T17:39:54Z" Destination="https://localhost:8088/sso/redirect" ProtocolBinding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" AssertionConsumerServiceURL="http://localhost:8087/acs/post"><ns1:Issuer Format="urn:oasis:names:tc:SAML:2.0:nameid-format:entity">http://localhost:8087/sp.xml</ns1:Issuer><ns2:Signature Id="Signature1"><ns2:SignedInfo><ns2:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/><ns2:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/><ns2:Reference URI="#id-fpzo50bmtZFEftz3s"><ns2:Transforms><ns2:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ns2:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ns2:Transforms><ns2:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ns2:DigestValue>YT2bA/FSzN3BL9W+Qm1nZUHCtFI=</ns2:DigestValue></ns2:Reference></ns2:SignedInfo><ns2:SignatureValue>SlcLgBFRUrknL4twOoy6VTnjDD5Pu3mj4QRZBXdCHCN5hhhOqCWDJjbPOunLe172\nGH17p0lAuV8PfVrQbUMF9QfvilKt9pfIKwtY8gdJRKPNUI53hMEUaC6tBebaC2Zn\n8a+2YwcDakm1sWIv9ekNgpLc3h2gwhKEVgzlIcluhtBeHGNI7PTK/9uIuKn5BsOI\nVuMReg2Kv1Er6ufWFAGl+hW4H0SclnWYyR0inNJo2FATzjauIx/3z3ehvNHWUF3i\nfuzAKD3nmnKuGjpczp0Ip84AUq9+rarrWIBksRzGy1UdI3aiNG4xTIELEB2gRJso\nEDdDJLBuks3CLSiLZN/v1qT3EBCaWP79ytyhhWFDoLuFhMDRsdb2h65mOFIa51zD\nXe78izhNCph2pxgjRAzbkQVWhlzAHjRK6AloZstzPTjGPYARPj/URNsi6BsWgePV\n+HBoc27jatNHE6+d6afHt13rCJDoaLvL8DRUmIiiaQ1HCaG9WE9L1F5JDTQfdVAR\nfc+S2HeuFRGBv1ciGZWQn2wHGN09SRwHcEn6zgSUY58y3Cn6aqJ9lNWit1qptXlp\naLmjgUKoTcxl8S7kjyPPi+JR+iV1t6fwe/XahsWfN9pEc3SNMwSn6kqZtRL2oNjR\nDtCkeONwlVmdhapKf4TbHo6SQFbXLlibMMs1A2JpNYM=</ns2:SignatureValue><ns2:KeyInfo><ns2:X509Data><ns2:X509Certificate>MIIFjTCCA3WgAwIBAgIUPqN85BV5eJsrEW8IN2rVIcHGliUwDQYJKoZIhvcNAQELBQAwVTELMAkGA1UEBhMCVVMxCzAJBgNVBAgMAldBMRAwDgYDVQQHDAdTZWF0dGxlMRowGAYDVQQKDBFweXNhbWwyIERlbW8gQ2VydDELMAkGA1UECwwCSVQwIBcNMjExMDA3MDgwNzE1WhgPMjEyMTEwMzEwODA3MTVaMFUxCzAJBgNVBAYTAlVTMQswCQYDVQQIDAJXQTEQMA4GA1UEBwwHU2VhdHRsZTEaMBgGA1UECgwRcHlzYW1sMiBEZW1vIENlcnQxCzAJBgNVBAsMAklUMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAuWw/2OYDIO3pAZyQFQadOWnOh/ilqWXd66M3gD3tft+zydi2IRTUphhlrVmL/7UrWjHYfrBbF6UrliwvXfjgdECRAA6ziMlzbc+RYHqw1XhR/Y1DxH1V3OZmidaHB3oisfXe68v28kTHnq0iGQjivkRaMWZXrMSQfakm5ZQz6HC92DgxsOXcSTMlCETNlziEik2C/4mhA96p+upQPoAC3e9Dn7lNUS2oJT/cZBggJOtLScV6Cyzv+k+u2MCuddzenrFONHBe7MNUYEg7Ho9Utas3y6prH36ZwsArtUPpNwBZrNlVenFeF6rUN80xhKNwvptlXQqAC+2NIhunYgNRoUHmy5opGBJpjqy0k16k+aac2t9Y/Lc+Q52PSh5Ze3C9Ip5CxoxA6hMk7IZT1kpsUl6uc8FBX9SLNRovIOC4r1anaxIareQjRab2iw+aRhTmKlGSXzlaSMS2FZMpT0q73d/rFo1/RKeE2dzG9fXe27jXJTv50J4Y46RF/6/C0BWxTAzdBPQj1I5KWVVX9XuZklSbhKv/sGNXxPe5p5hR9rwt2oCrAhHzFZzddrzIBVRi6UtgnPMg8klnUcHsDt7elCuAF2ouB4Z8YplxhhYJga3NfLmHXYw1R7PBF2Ud4FSgkjCO/ME/+FgyUKAaG6qKBMe3FJzuXch314qR1+1xT+ECAwEAAaNTMFEwHQYDVR0OBBYEFIwaXBfOL6adUTxpgv/NJGZ3gLrIMB8GA1UdIwQYMBaAFIwaXBfOL6adUTxpgv/NJGZ3gLrIMA8GA1UdEwEB/wQFMAMBAf8wDQYJKoZIhvcNAQELBQADggIBAI4SQxTjjNvV7E903U/l1pd7PoyvM9LxcYkmnjTGMHBoK1/HbpU27s9ZHjodfT7kk1uMCh6tx7kuaSboWX9BX8Sdgtfj8Y9hs7Bb4MhTH3qJ3LFGK2d0LgK+lTFNRtmyJfExfmDcXi/YO+0IVd3mK49BfGdpN8lT7KjtcbUk4gObGLuN/XGCTjFPmyIRJfgZK6kLWskthddoa4beqzpVQnbn5TBtShzlzmrjmU5YieP54IoQXDzE5mWn4PFuMsZ9wCLcSwRYiP3fUMGCChs64QADuIjZYB8xl3CHKxZMu9Ki+dHQ2W1X1UyozzF5i19SrhVdYXlumVOS6jnAjZ/UNIS1mYCZk5AT8jtsCBkgmNmhZab3BNbLklLz2AYi9fpICYkHei2fYlAHKXPFZFKIHmG3mqpgu9nClyelrjRsxvrvkJ4Di/aPZ3qA+I006uYwTi+NsL6eXBhIPUuA/NHax53kzJSW/AcjRhSKriKdSqD+lLOoQ+z9ZnZXeBKCWzGU9bcMUk1x2pJJJBI7AJC/ObAbJDCtQreZZE+u+CABhkwbLPkWx8ZgS9a0/gBVmIJ34qsVmrv0sHnk1JQoFkMNT2oQmCuoA17HtfqxGyEPCxEJu/kqgK3fviKgd1MEP4Y73F6yVtiEWnspy4cQqr6pHBBggDbjve6DPNsIM1jHGUsR</ns2:X509Certificate></ns2:X509Data></ns2:KeyInfo></ns2:Signature><ns0:NameIDPolicy Format="urn:oasis:names:tc:SAML:2.0:nameid-format:persistent" AllowCreate="false"/></ns0:AuthnRequest>\n', relay_state: None, sigalg: None, signature: None
[2022-01-02 21:09:54,573] [DEBUG] [saml2.sigver._check_signature] ==== Certs from metadata ==== http://localhost:8087/sp.xml: [<tempfile._TemporaryFileWrapper object at 0x7ff830250fd0>] ====
[2022-01-02 21:09:54,578] [DEBUG] [saml2.sigver._run_xmlsec] xmlsec command: /usr/bin/xmlsec1 --verify --enabled-reference-uris empty,same-doc --enabled-key-data raw-x509-cert --pubkey-cert-pem /tmp/tmpzlontetn.pem --id-attr:ID urn:oasis:names:tc:SAML:2.0:protocol:AuthnRequest --node-id id-fpzo50bmtZFEftz3s --output /tmp/tmpahnhe2uh.xml /tmp/tmpfetgf62g.xml
[2022-01-02 21:09:54,586] [INFO] [saml2.request._loads] Request message: <ns0:AuthnRequest xmlns:ns0="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:ns1="urn:oasis:names:tc:SAML:2.0:assertion" xmlns:ns2="http://www.w3.org/2000/09/xmldsig#" ID="id-fpzo50bmtZFEftz3s" Version="2.0" IssueInstant="2022-01-02T17:39:54Z" Destination="https://localhost:8088/sso/redirect" ProtocolBinding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" AssertionConsumerServiceURL="http://localhost:8087/acs/post"><ns1:Issuer Format="urn:oasis:names:tc:SAML:2.0:nameid-format:entity">http://localhost:8087/sp.xml</ns1:Issuer><ns2:Signature Id="Signature1"><ns2:SignedInfo><ns2:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#" /><ns2:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1" /><ns2:Reference URI="#id-fpzo50bmtZFEftz3s"><ns2:Transforms><ns2:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature" /><ns2:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#" /></ns2:Transforms><ns2:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1" /><ns2:DigestValue>YT2bA/FSzN3BL9W+Qm1nZUHCtFI=</ns2:DigestValue></ns2:Reference></ns2:SignedInfo><ns2:SignatureValue>SlcLgBFRUrknL4twOoy6VTnjDD5Pu3mj4QRZBXdCHCN5hhhOqCWDJjbPOunLe172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</ns2:SignatureValue><ns2:KeyInfo><ns2:X509Data><ns2:X509Certificate>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</ns2:X509Certificate></ns2:X509Data></ns2:KeyInfo></ns2:Signature><ns0:NameIDPolicy Format="urn:oasis:names:tc:SAML:2.0:nameid-format:persistent" AllowCreate="false" /></ns0:AuthnRequest>
[2022-01-02 21:09:54,587] [DEBUG] [saml2.entity._parse_request] Loaded request
[2022-01-02 21:09:54,587] [DEBUG] [saml2.entity._parse_request] Verified request
TypeError('sequence item 1: expected str instance, tuple found')
Traceback (most recent call last):
  File "./idp.py", line 403, in redirect
    _key = saml_msg["key"]
KeyError: 'key'

During handling of the above exception, another exception occurred:

Traceback (most recent call last):
  File "/venv/lib/python3.8/site-packages/cheroot/server.py", line 1287, in communicate
    req.respond()
  File "/venv/lib/python3.8/site-packages/cheroot/server.py", line 1077, in respond
    self.server.gateway(self).respond()
  File "/venv/lib/python3.8/site-packages/cheroot/wsgi.py", line 140, in respond
    response = self.req.server.wsgi_app(self.env, self.start_response)
  File "./idp.py", line 1082, in application
    return func()
  File "./idp.py", line 428, in redirect
    if verify_redirect_signature(saml_msg, IDP.sec.sec_backend, cert):
  File "/venv/lib/python3.8/site-packages/saml2/sigver.py", line 617, in verify_redirect_signature
    _key = extract_rsa_key_from_x509_cert(pem_format(cert))
  File "/venv/lib/python3.8/site-packages/saml2/sigver.py", line 482, in pem_format
    return os.linesep.join([
TypeError: sequence item 1: expected str instance, tuple found

And here is a value of saml_msg I logged, there is no key in the saml_msg:

{'SAMLRequest': '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', 'RelayState': 'xS8oZWhGcxK8paES', 'SigAlg': 'http://www.w3.org/2000/09/xmldsig#rsa-sha1', 'Signature': 'aHNoLcw9MgT/Pua0zgHFRH6i6q6S6cyKq+7oxeXMx3rTmlDrA9IwV7B+0Z4FbNqFHWGhtApY4ZRedogt72VwwPwU1/xaAdjUi6tiZ40DGuuCNuVqmKSvRecAKxJ+yNQUe4FZu7VDM+jrXSfkEX/gcDEyMd4yu9WwAZEgDmrcxh1cIN5Xa2df1RDiEV0Zb9QowIu86XT2tRPZGE9q7fT4liY/kqTLzsDXFRkeoP56B+yBdUb0eG5TUWTUtvzARdmmC6TUM0RGu84x6XjlSwXdXFmHTJDeuBTvzdE0LHZuuC1vqEbiz45nLrXXzGumELdAlZPxsQCjxPFkHFWpY2vaDcpYALi4h6pAX904r2h3oEuo+ayntn1L7p3Kzq8lduTMwppb74tEm0iiU6VX9hQC3vP8FVxnd0V23dmGXyjVAD9OgfVK5FQNOGo2cx+FshI+9d4E+Fs4fwUrUHdJz0zcbKHqI4A5GeV4WigecwQ82zfAcvViyV72CwPM16vYsvehjMk2K1A38+UhxU6jqJwVYOaPPHvCnjDDLnQSoOJa13aEyAxUP06NMFSY7+f/XKwVIVdrvDbyv000JcYigHGhhVhe0+aG9mrXDdWX8atUrWWQOZJbUIh5K2mT0iEk+Y6Nkg/Rq20aLTrvje61VFq3abb6QnPYq/c2nJSeo9Nhgb8='}
omidraha commented 2 years ago

@c00kiemon5ter

c00kiemon5ter commented 2 years ago

Hello, I pushed 6badb32 to fix this.

I will close this now, but let me know if you find anything else.

omidraha commented 2 years ago

Thanks, I confirm that the problem has been resolved .