My favorites | Sign in
Logo
                
New issue | Search
for
| Advanced search | Search tips
Issue 47: Non-deterministic ordering of signed fields cause verification failure
1 person starred this issue and may be notified of changes. Back to list
Status:  Fixed
Owner:  andrewarnott
Closed:  Mar 2008
Type-Defect
Priority-Medium
Release-0.1


Sign in to add a comment
 
Reported by andrewarnott, Mar 04, 2008
The methods that sign fields do not guarantee that the fields are actually 
written out in Key-Value Form in the same order as they are promised in 
the openid.signed field.  This is due to Dictionary not guaranteeing any 
order during standard enumeration.

This probably affects all versions of OpenID, and may be causing 
intermittent random authentication failures.
Comment 1 by andrewarnott, Mar 04, 2008
Fixed in trunk in r276.
Labels: Release-0.1
Comment 2 by andrewarnott, Mar 06, 2008
Fixed in 0.1 branch r283.
Status: Fixed
Sign in to add a comment

Hosted by Google Code