-
Notifications
You must be signed in to change notification settings - Fork 428
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Forbidden error: asn1: structure error: tags don't match #69
Comments
This was because of the |
This is almost certainly a regression due to ditching xmlsec. Next steps here, for me or you or anyone who wants to help, is to try and generate some failing test cases with from shibboleth. |
@crewjam I don't have much (actually any) knowledge about RSA keys generation. Anyway I just thought I'd share what I did as a test case possibly...or we can document this that the private key should begin with If you or anyone can help me in getting to know why this worked that'll be great. I'm going to do my research later, but I need to figure out and get my current connection working first |
The change in [08dd8e9] makes us more type safe w/r/t to keys and stuff. Although your code may need to change, it might make the trouble you are having more obvious. HTH. |
The service provider uses crewjam/saml. It integrates with pingFederate IdP, but a shibboleth IdP throws this error
My IdP's private key seems to be correct and works for an older version of crewjam/saml, when crypto/ripemd wasn't used. What is to be changed to avoid this error?
The text was updated successfully, but these errors were encountered: