IETF Logo Mail Archive

Re: [jose] JOSE in Python

Mike Jones <Michael.Jones@microsoft.com> Wed, 21 August 2013 22:36 UTC

Return-Path: <Michael.Jones@microsoft.com>
X-Original-To: jose@ietfa.amsl.com
Delivered-To: jose@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6323621F9344 for <jose@ietfa.amsl.com>; Wed, 21 Aug 2013 15:36:12 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.861
X-Spam-Level:
X-Spam-Status: No, score=-1.861 tagged_above=-999 required=5 tests=[AWL=-1.452, BAYES_00=-2.599, FR_TEST_BASE64_BAD=3.189, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-1]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id I+b+iBzVyLte for <jose@ietfa.amsl.com>; Wed, 21 Aug 2013 15:36:06 -0700 (PDT)
Received: from na01-bl2-obe.outbound.protection.outlook.com (mail-bl2lp0203.outbound.protection.outlook.com [207.46.163.203]) by ietfa.amsl.com (Postfix) with ESMTP id 6DAEC21F92CD for <jose@ietf.org>; Wed, 21 Aug 2013 15:35:53 -0700 (PDT)
Received: from BL2PR03CA018.namprd03.prod.outlook.com (10.141.66.26) by BL2PR03MB604.namprd03.prod.outlook.com (10.255.109.38) with Microsoft SMTP Server (TLS) id 15.0.745.25; Wed, 21 Aug 2013 22:35:51 +0000
Received: from BN1AFFO11FD014.protection.gbl (2a01:111:f400:7c10::25) by BL2PR03CA018.outlook.office365.com (2a01:111:e400:c1b::26) with Microsoft SMTP Server (TLS) id 15.0.731.16 via Frontend Transport; Wed, 21 Aug 2013 22:35:50 +0000
Received: from mail.microsoft.com (131.107.125.37) by BN1AFFO11FD014.mail.protection.outlook.com (10.58.52.74) with Microsoft SMTP Server (TLS) id 15.0.745.15 via Frontend Transport; Wed, 21 Aug 2013 22:35:50 +0000
Received: from TK5EX14MBXC283.redmond.corp.microsoft.com ([169.254.2.178]) by TK5EX14MLTC104.redmond.corp.microsoft.com ([157.54.79.159]) with mapi id 14.03.0136.001; Wed, 21 Aug 2013 22:34:17 +0000
From: Mike Jones <Michael.Jones@microsoft.com>
To: Richard Barnes <rlb@ipv.sx>, Brian Campbell <bcampbell@pingidentity.com>
Thread-Topic: [jose] JOSE in Python
Thread-Index: AQHOmhHBwajySn4oD0+wFv2sgaFFO5mW+8OwgAA4GYCAAM8jgIAIRhkw
Date: Wed, 21 Aug 2013 22:34:16 +0000
Message-ID: <4E1F6AAD24975D4BA5B16804296739436B7CB149@TK5EX14MBXC283.redmond.corp.microsoft.com>
References: <CAL02cgTPyqUkr5Awj4iW=QNkC5hBtR=RnaTcm5hUtdEzjh1nOQ@mail.gmail.com> <4E1F6AAD24975D4BA5B16804296739436B782E64@TK5EX14MBXC283.redmond.corp.microsoft.com> <CA+k3eCT6zzjLH-v2sKeWwz5+_WM6NgfvCRjhVagBSM+QvctdoQ@mail.gmail.com> <CAL02cgRqysHU0PuaUnmBbcY1c8UnYvFpEyrH4=qRo-YnhxemvA@mail.gmail.com>
In-Reply-To: <CAL02cgRqysHU0PuaUnmBbcY1c8UnYvFpEyrH4=qRo-YnhxemvA@mail.gmail.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-originating-ip: [157.54.51.71]
Content-Type: multipart/alternative; boundary="_000_4E1F6AAD24975D4BA5B16804296739436B7CB149TK5EX14MBXC283r_"
MIME-Version: 1.0
X-Forefront-Antispam-Report: CIP:131.107.125.37; CTRY:US; IPV:CAL; IPV:NLI; EFV:NLI; SFV:NSPM; SFS:(377454003)(199002)(189002)(24454002)(74876001)(20776003)(80022001)(54356001)(74706001)(81542001)(79102001)(69226001)(4396001)(77096001)(74662001)(81342001)(47446002)(56816003)(71186001)(31966008)(74502001)(54316002)(47976001)(76482001)(56776001)(80976001)(53806001)(66066001)(65816001)(74366001)(59766001)(63696002)(77982001)(51856001)(55846006)(512954002)(19300405004)(6806004)(76796001)(50986001)(16236675002)(49866001)(46102001)(15202345003)(47736001)(19580395003)(19580405001)(81686001)(44976005)(19580385001)(33656001)(83072001)(83322001)(81816001)(76786001); DIR:OUT; SFP:; SCL:1; SRVR:BL2PR03MB604; H:mail.microsoft.com; CLIP:131.107.125.37; RD:InfoDomainNonexistent; A:1; MX:1; LANG:en;
X-O365ENT-EOP-Header: Message processed by - O365_ENT: Allow from ranges (Engineering ONLY)
X-Forefront-PRVS: 0945B0CC72
X-OriginatorOrg: DuplicateDomain-a84fc36a-4ed7-4e57-ab1c-3e967bcbad48.microsoft.com
X-MS-Exchange-CrossPremises-OriginalClientIPAddress: 131.107.125.37
X-MS-Exchange-CrossPremises-AuthSource: BN1AFFO11FD014.protection.gbl
X-MS-Exchange-CrossPremises-AuthAs: Anonymous
X-MS-Exchange-CrossPremises-AVStamp-Service: 1.0
X-MS-Exchange-CrossPremises-SCL: 1
X-MS-Exchange-CrossPremises-Antispam-ScanContext: DIR:Originating; SFV:NSPM; SKIP:0;
X-MS-Exchange-CrossPremises-Processed-By-Journaling: Journal Agent
X-OrganizationHeadersPreserved: BL2PR03MB604.namprd03.prod.outlook.com
Cc: "jose@ietf.org" <jose@ietf.org>
Subject: Re: [jose] JOSE in Python
X-BeenThere: jose@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: Javascript Object Signing and Encryption <jose.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/jose>, <mailto:jose-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/jose>
List-Post: <mailto:jose@ietf.org>
List-Help: <mailto:jose-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/jose>, <mailto:jose-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 21 Aug 2013 22:36:12 -0000

Thanks guys.  I've corrected this in my editor's working copy.

                                                            -- Mike

From: Richard Barnes [mailto:rlb@ipv.sx]
Sent: Friday, August 16, 2013 9:14 AM
To: Brian Campbell
Cc: Mike Jones; jose@ietf.org
Subject: Re: [jose] JOSE in Python

Exactly.  Just need to change the example:

OLD:
"""
     eyJhbGciOiJFUzUxMiJ9
     .
     eyJpc3MiOiJqb2UiLA0KICJleHAiOjEzMDA4MTkzODAsDQogImh0dHA6Ly9leGFt
     cGxlLmNvbS9pc19yb290Ijp0cnVlfQ
     .
     AdwMgeerwtHoh-l192l60hp9wAHZFVJbLfD_UxMi70cwnZOYaRI1bKPWROc-mZZq
     wqT2SI-KGDKB34XO0aw_7XdtAG8GaSwFKdCAPZgoXD2YBJZCPEX3xKpRwcdOO8Kp
     EHwJjyqOgzDO7iKvU8vcnwNrmxYbSW9ERBXukOXolLzeO_Jn

"""
NEW:
"""
     eyJhbGciOiJFUzUxMiJ9
     .
     UGF5bG9hZA
     .
     AdwMgeerwtHoh-l192l60hp9wAHZFVJbLfD_UxMi70cwnZOYaRI1bKPWROc-mZZq
     wqT2SI-KGDKB34XO0aw_7XdtAG8GaSwFKdCAPZgoXD2YBJZCPEX3xKpRwcdOO8Kp
     EHwJjyqOgzDO7iKvU8vcnwNrmxYbSW9ERBXukOXolLzeO_Jn
"""

On Thu, Aug 15, 2013 at 11:52 PM, Brian Campbell <bcampbell@pingidentity.com<mailto:bcampbell@pingidentity.com>> wrote:
On Thu, Aug 15, 2013 at 6:38 PM, Mike Jones <Michael.Jones@microsoft.com<mailto:Michael.Jones@microsoft.com>> wrote:
> How is the ES512 example broken and what needs to be done to fix it?
>
Looks like maybe the encoded payload got hosed up somehow in the final
compact serialization. It's UGF5bG9hZA earlier in the example but the
final CS has it as
eyJpc3MiOiJqb2UiLA0KICJleHAiOjEzMDA4MTkzODAsDQogImh0dHA6Ly9leGFtcGxlLmNvbS9pc19yb290Ijp0cnVlfQ
- the signature validates for me with the former but not the latter.

v2.23.0 | Report a Bug | By Email