IETF Logo Mail Archive

Re: [jose] JOSE in Python

Richard Barnes <rlb@ipv.sx> Fri, 16 August 2013 16:13 UTC

Return-Path: <rlb@ipv.sx>
X-Original-To: jose@ietfa.amsl.com
Delivered-To: jose@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 14DA011E8169 for <jose@ietfa.amsl.com>; Fri, 16 Aug 2013 09:13:48 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.253
X-Spam-Level:
X-Spam-Status: No, score=-1.253 tagged_above=-999 required=5 tests=[AWL=-1.466, BAYES_00=-2.599, FM_FORGED_GMAIL=0.622, FR_TEST_BASE64_BAD=3.189, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-1]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id lSsO9GD-7n-W for <jose@ietfa.amsl.com>; Fri, 16 Aug 2013 09:13:42 -0700 (PDT)
Received: from mail-ob0-f182.google.com (mail-ob0-f182.google.com [209.85.214.182]) by ietfa.amsl.com (Postfix) with ESMTP id 2F35011E8152 for <jose@ietf.org>; Fri, 16 Aug 2013 09:13:40 -0700 (PDT)
Received: by mail-ob0-f182.google.com with SMTP id wo10so2276211obc.13 for <jose@ietf.org>; Fri, 16 Aug 2013 09:13:39 -0700 (PDT)
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20120113; h=x-gm-message-state:mime-version:in-reply-to:references:date :message-id:subject:from:to:cc:content-type; bh=nNbx+UzorxO4qn96ZoYAxaCCfO+vxrAoB474jZeitfg=; b=mUeZboNpkMCVTRdXyqQqAxVhGS2DbxfYlWl2erHclRGBUP6Jjo91VdfDItOSmdn2oN oPyh90V6uadmU/3EPMe4dVE8Lqr7yeW0dHTLrwAikmZLiteajboKPzh4fqDHzzpdbMQT DwF8TSnEOAynIkaQoSPzVSY4ClNuOfKqzBrWa3qXFaVfz+l8R89hXe0hyCuG85fyHmuD 2xonDCjUJCifa5ndLoPbtpv2faBaiHcgFU6fE9/BxcK0jYFt5dQO9inVBaiazkzcqP8Y l5WsbA9BjZtdL+2oKAIPfZZbUnv7HY0e/BmN79c8v4mZCsHV/Ln36/SAg7lNHZzY0c75 20CQ==
X-Gm-Message-State: ALoCoQmrEdkGWcCQdnEviT54CGjUXcfnFswIVWo9B93VHJ8jeQW4wuC57s7L9FrWCHEAsKyWn94a
MIME-Version: 1.0
X-Received: by 10.182.87.170 with SMTP id az10mr1943226obb.10.1376669619694; Fri, 16 Aug 2013 09:13:39 -0700 (PDT)
Received: by 10.60.31.74 with HTTP; Fri, 16 Aug 2013 09:13:39 -0700 (PDT)
X-Originating-IP: [192.1.51.54]
In-Reply-To: <CA+k3eCT6zzjLH-v2sKeWwz5+_WM6NgfvCRjhVagBSM+QvctdoQ@mail.gmail.com>
References: <CAL02cgTPyqUkr5Awj4iW=QNkC5hBtR=RnaTcm5hUtdEzjh1nOQ@mail.gmail.com> <4E1F6AAD24975D4BA5B16804296739436B782E64@TK5EX14MBXC283.redmond.corp.microsoft.com> <CA+k3eCT6zzjLH-v2sKeWwz5+_WM6NgfvCRjhVagBSM+QvctdoQ@mail.gmail.com>
Date: Fri, 16 Aug 2013 12:13:39 -0400
Message-ID: <CAL02cgRqysHU0PuaUnmBbcY1c8UnYvFpEyrH4=qRo-YnhxemvA@mail.gmail.com>
From: Richard Barnes <rlb@ipv.sx>
To: Brian Campbell <bcampbell@pingidentity.com>
Content-Type: multipart/alternative; boundary="089e0111bcfaa7bd8a04e412df00"
Cc: Mike Jones <Michael.Jones@microsoft.com>, "jose@ietf.org" <jose@ietf.org>
Subject: Re: [jose] JOSE in Python
X-BeenThere: jose@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: Javascript Object Signing and Encryption <jose.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/jose>, <mailto:jose-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/jose>
List-Post: <mailto:jose@ietf.org>
List-Help: <mailto:jose-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/jose>, <mailto:jose-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 16 Aug 2013 16:13:48 -0000

Exactly.  Just need to change the example:

OLD:
"""
     eyJhbGciOiJFUzUxMiJ9
     .
     eyJpc3MiOiJqb2UiLA0KICJleHAiOjEzMDA4MTkzODAsDQogImh0dHA6Ly9leGFt
     cGxlLmNvbS9pc19yb290Ijp0cnVlfQ
     .
     AdwMgeerwtHoh-l192l60hp9wAHZFVJbLfD_UxMi70cwnZOYaRI1bKPWROc-mZZq
     wqT2SI-KGDKB34XO0aw_7XdtAG8GaSwFKdCAPZgoXD2YBJZCPEX3xKpRwcdOO8Kp
     EHwJjyqOgzDO7iKvU8vcnwNrmxYbSW9ERBXukOXolLzeO_Jn

"""
NEW:
"""
     eyJhbGciOiJFUzUxMiJ9
     .
     UGF5bG9hZA
     .
     AdwMgeerwtHoh-l192l60hp9wAHZFVJbLfD_UxMi70cwnZOYaRI1bKPWROc-mZZq
     wqT2SI-KGDKB34XO0aw_7XdtAG8GaSwFKdCAPZgoXD2YBJZCPEX3xKpRwcdOO8Kp
     EHwJjyqOgzDO7iKvU8vcnwNrmxYbSW9ERBXukOXolLzeO_Jn
"""


On Thu, Aug 15, 2013 at 11:52 PM, Brian Campbell <bcampbell@pingidentity.com
> wrote:

> On Thu, Aug 15, 2013 at 6:38 PM, Mike Jones <Michael.Jones@microsoft.com>
> wrote:
> > How is the ES512 example broken and what needs to be done to fix it?
> >
>
> Looks like maybe the encoded payload got hosed up somehow in the final
> compact serialization. It's UGF5bG9hZA earlier in the example but the
> final CS has it as
>
> eyJpc3MiOiJqb2UiLA0KICJleHAiOjEzMDA4MTkzODAsDQogImh0dHA6Ly9leGFtcGxlLmNvbS9pc19yb290Ijp0cnVlfQ
> - the signature validates for me with the former but not the latter.
>

v2.23.0 | Report a Bug | By Email