search

vinothair / openinfocard

Automatically exported from code.google.com/p/openinfocard
0 stars 0 forks source link

error while verifying self-issued token's digest(in case of non-english) #21

Open GoogleCodeExporter opened 8 years ago

GoogleCodeExporter commented 8 years ago 
What steps will reproduce the problem?
1. make a self-issued card with non-english(ex. korean)
2. invoke IS, then submit the card
3. met following error

[CryptographicException: Fail to verify digest for
'#uuid-778A7DF9-6B99-18B4-AD2E-B2A6F6E59DAD'.]
   System.IdentityModel.Reference.EnsureDigestValidityIfIdMatches(String
id, Object resolvedXmlSource) +207772

System.IdentityModel.StandardSignedInfo.EnsureDigestValidityIfIdMatches(String
id, Object resolvedXmlSource) +65
   System.IdentityModel.SignedInfo.EnsureDigestValidity(String id, Object
resolvedXmlSource) +18
   System.IdentityModel.Tokens.SamlAssertion.VerifySignature(SignedXml
signature, SecurityKey signatureVerificationKey) +64
   System.IdentityModel.Tokens.SamlAssertion.ReadXml(XmlDictionaryReader
reader, SamlSerializer samlSerializer, SecurityTokenSerializer
keyInfoSerializer, SecurityTokenResolver outOfBandTokenResolver) +1194

System.IdentityModel.Tokens.SamlSerializer.LoadAssertion(XmlDictionaryReader 
reader,
SecurityTokenSerializer keyInfoSerializer, SecurityTokenResolver
outOfBandTokenResolver) +57
   System.IdentityModel.Tokens.SamlSerializer.ReadToken(XmlReader reader,
SecurityTokenSerializer keyInfoSerializer, SecurityTokenResolver
outOfBandTokenResolver) +66

System.ServiceModel.Security.SamlTokenEntry.ReadTokenCore(XmlDictionaryReader
reader, SecurityTokenResolver tokenResolver) +17

System.ServiceModel.Security.WSSecurityTokenSerializer.ReadTokenCore(XmlReader
reader, SecurityTokenResolver tokenResolver) +132

System.IdentityModel.Selectors.SecurityTokenSerializer.ReadToken(XmlReader
reader, SecurityTokenResolver tokenResolver) +23
   Microsoft.IdentityModel.TokenProcessor.Token..ctor(String xmlToken) in
c:\Users\user\Documents\Windows CardSpace
Samples\samplecode\CardSpaceSolution\CardSpace\App_Code\TokenProcessor.cs:182
   ASP.webapplications_login3_aspx.Page_Load(Object sender, EventArgs e) in
c:\Users\user\Documents\Windows CardSpace
Samples\samplecode\CardSpaceSolution\CardSpace\WebApplications\login3.aspx:25
   System.Web.Util.CalliHelper.EventArgFunctionCaller(IntPtr fp, Object o,
Object t, EventArgs e) +15
   System.Web.Util.CalliEventHandlerDelegateProxy.Callback(Object sender,
EventArgs e) +33
   System.Web.UI.Control.OnLoad(EventArgs e) +99
   System.Web.UI.Control.LoadRecursive() +47
   System.Web.UI.Page.ProcessRequestMain(Boolean
includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint) +1436

What is the expected output? What do you see instead?

no error.

What version of the product are you using? On what operating system?

RP is cardspace sample kit

web server; iis6
os;vista

Please provide any additional information below.

In case of CardSpace, it works.

Original issue reported on code.google.com by kimseung...@gmail.com on 18 Sep 2008 at 6:46

GoogleCodeExporter commented 8 years ago 
Could you please set your preferences so that the cardstore is not encrypted?!
I guess you have to add or delete a card to really get an un-encrypted store.
The store is in the file cardDb.xml.
Please inspect that file and verify that it contains some XML.
Then please send this file to ignisvulpis () gmail com

Thank you.

Please don't add too much non-ascii or even non-utf8 characters to the claims 
values.
One should be enough to trigger the fault.

Original comment by ignisvul...@gmail.com on 29 Oct 2008 at 9:41