| Issue 47: | Non-deterministic ordering of signed fields cause verification failure | |
| 1 person starred this issue and may be notified of changes. | Back to list |
Sign in to add a comment
|
The methods that sign fields do not guarantee that the fields are actually written out in Key-Value Form in the same order as they are promised in the openid.signed field. This is due to Dictionary not guaranteeing any order during standard enumeration. This probably affects all versions of OpenID, and may be causing intermittent random authentication failures. |
||||||||||||
,
Mar 04, 2008
Fixed in trunk in r276.
Labels: Release-0.1
|
|||||||||||||
,
Mar 06, 2008
Fixed in 0.1 branch r283.
Status: Fixed
|
|||||||||||||
|
|
|||||||||||||