PHP and "OpenID authentication failed: Bad signature"

Kevin Jardine kevin at radagast.biz
Thu Feb 15 01:10:43 PST 2007


I agree that this would also be useful.

I also spent hours tracking down a "bad signature" problem that turned 
out to be caused by a bad GMP (integer math)library. Unfortunately, bad 
GMP libraries (or bad GMP bindings to PHP) are very common, as the GMP 
site itself admits: "It has come to the point where a compiler should be 
assumed to miscompile GMP", see http://www.swox.com/gmp/.

A bit of sanity checking when OpenID runs could make things much easier.

Cheers,
Kevin

Phil Y wrote:
> Please can I request a feature to be added to detect.php.
> 
> I'm using php 4.3.9 on RH EL4, and the example program fails with the error
> "OpenID authentication failed: Bad signature".
> 
> Can you please add a function to test the encryption functions of OpenID;
> 1. for a fixed assoc_handle, make sure secret key is correct.
> 2. for a test token_contents value, make sure the signature is calculated
> correctly.
> 
> This little test would have saved me hours locating the cause of the
> problem  (it works fine on a FC3 machine)
> 
> Cheers,
> Phil.
> 
> 
> ------------------------------------------------------------------------
> 
> _______________________________________________
> Dev mailing list
> Dev at lists.openidenabled.com
> http://lists.openidenabled.com/mailman/listinfo/dev


-- 
Kevin Jardine
Radagast Solutions

Internet campaign advice and magic
http://radagast.biz

YIM: kevinjardine
Skype: kevinjardine
Eml: kevin at radagast.biz
Tel: +31 (0)6 25581608



More information about the Dev mailing list