PHP and "OpenID authentication failed: Bad signature"
Kevin Jardine
kevin at radagast.biz
Thu Feb 15 01:10:43 PST 2007
I agree that this would also be useful.
I also spent hours tracking down a "bad signature" problem that turned
out to be caused by a bad GMP (integer math)library. Unfortunately, bad
GMP libraries (or bad GMP bindings to PHP) are very common, as the GMP
site itself admits: "It has come to the point where a compiler should be
assumed to miscompile GMP", see http://www.swox.com/gmp/.
A bit of sanity checking when OpenID runs could make things much easier.
Cheers,
Kevin
Phil Y wrote:
> Please can I request a feature to be added to detect.php.
>
> I'm using php 4.3.9 on RH EL4, and the example program fails with the error
> "OpenID authentication failed: Bad signature".
>
> Can you please add a function to test the encryption functions of OpenID;
> 1. for a fixed assoc_handle, make sure secret key is correct.
> 2. for a test token_contents value, make sure the signature is calculated
> correctly.
>
> This little test would have saved me hours locating the cause of the
> problem (it works fine on a FC3 machine)
>
> Cheers,
> Phil.
>
>
> ------------------------------------------------------------------------
>
> _______________________________________________
> Dev mailing list
> Dev at lists.openidenabled.com
> http://lists.openidenabled.com/mailman/listinfo/dev
--
Kevin Jardine
Radagast Solutions
Internet campaign advice and magic
http://radagast.biz
YIM: kevinjardine
Skype: kevinjardine
Eml: kevin at radagast.biz
Tel: +31 (0)6 25581608
More information about the Dev
mailing list