atsign-foundation / at_protocol

The open source repository for the atProtocol specification and supporting documentation
https://docs.atsign.com
BSD 3-Clause "New" or "Revised" License
9 stars 7 forks source link

from verb doesn't behave as documented when using a different atSign #54

Open cpswan opened 1 year ago

cpswan commented 1 year ago

Describe the bug

The docs presently state:

If the user who is trying to connect is not the owner of the atServer, then the from verb should respond with the following response.

proof:<sessionid>@<@sign>:<UUID>

If the user is not allowed to connect to the atServer, then it should respond back with the following error and close the connection to the server.

error:AT0013-Connection Exception

But if I try from:anotheratsign then the actual response is:

error:AT0401-Exception: Certificate Verification Failed

Steps to reproduce

  1. First I lookup cpswan in the atDirectory, which is 8fe461b7-9d18-5ccf-9e3b-9ffe4cd09571.canary.atsign.zone:1912
  2. Then I openssl s_client 8fe461b7-9d18-5ccf-9e3b-9ffe4cd09571.canary.atsign.zone:1912
  3. And then I from:colin or from:@colin or from:infrafon_0058
  4. The response is error:AT0401-Exception: Certificate Verification Failed

Expected behavior

The response should be: proof:<sessionid>@<@sign>:<UUID>

Additional context

If I try to use an atSign that doesn't exist e.g. from:anywhere then I (correctly) get:

error:AT0007-Exception: Unable to find secondary address for atSign:anywhere
gkc commented 1 year ago
cpswan commented 1 year ago

We should probably be clearer about things that can only be done atServer-atServer.