search

lovoni / openinfocard

Automatically exported from code.google.com/p/openinfocard
0 stars 0 forks source link

non-ASCII cards cause RP signature validation failure #6

Open GoogleCodeExporter opened 9 years ago

GoogleCodeExporter commented 9 years ago 
What steps will reproduce the problem?
1. Use the Microsoft CardSpace client to create a self-issued card with 
claims that have values containing Unicode characters outside of the 
ASCII range (eg. accents, Russian or Greek)
2. Send this card to the Openinfocard relying party.

What is the expected output? What do you see instead?

Expect the login to succeed.  Instead get a servlet error as 
the signature validation failed.

What version of the product are you using? On what operating system?

I tried this with the latest svn source of the RP built and running on 
Windows XP, as well as xmldap.org.

Please provide any additional information below.

The wordpress code for identityblog.org seems to have a similar problem.

Original issue reported on code.google.com by mark.w...@gmail.com on 27 Sep 2006 at 7:30

GoogleCodeExporter commented 9 years ago 
"Digest of the Reference did not match the provided Digest. Exiting."

Original comment by mark.w...@gmail.com on 27 Sep 2006 at 7:32

GoogleCodeExporter commented 9 years ago 
And I get the same error when using the Firefox identity selector.

Original comment by mark.w...@gmail.com on 27 Sep 2006 at 7:43

GoogleCodeExporter commented 9 years ago 
I can get Firefox to work if I limit the characters to the ISO-8859-1 subset of 
Unicode.

Original comment by mark.w...@gmail.com on 27 Sep 2006 at 8:07