[Planetlab-devel] Credential:Verify

[Scott Baker]

I deleted the credential out of my ~/.sfi and let the sfi tool
download a new one. I tried it again this morning and received a
credential with an empty signature. It's also giving me a '500
internal server' error when attempting to access the registry. I'm
doing the following:

rm ~/.sfi/smbaker.cred
./sfi.py show plc.arizona.bakers

This is with the latest code from the svn; I haven't looked at the new
git repository yet.

Thanks for the note on xmlsec1; I was installing xmlsec1-openssl but
not xmlsec1-openssl-devel.

Scott

On Fri, Jul 9, 2010 at 8:38 AM, Josh Karlin <jkarlin at bbn.com> wrote:
> Hi Scott,
>
> Yes, xmlsec1 is a bit of a pain.  Be sure to install xmlsec1-openssl-devel
> as well as xmlsec1 packages.  You're right that the signatures tag should be
> filled, so it seems like the credential wasn't signed for some reason.  I
> believe Tony had a similar problem at one point and had to remove all cached
> credentials.  I assume you've rebuilt all your certs/creds as well?
>
> Josh
>
> On 7/6/10 9:57 PM, Scott Baker wrote:
>>
>> I'm trying to verify a credential using the Verify() method, and I
>> received an error from the xmlsec1 program, about being unable to find
>> what I think was a signature (I think it was looking for node:ref-sig
>> or something like that; I lost the exact message). Looking at the
>> credential that was downloaded via SFI, it looks like the signature
>> block is empty, so I'm wondering if that is the problem. Below is the
>> last line of the credential with the empty signature:
>>
>> ...
>> </credential><signatures/></signed-credential>'
>>
>> Should credential:Verify() be working in the current code tree? I had
>> a wealth of problems getting xmlsec1 installed and working, so the
>> problem may lie there.
>>
>> Thanks,
>> Scott
>>
>> _______________________________________________
>> Devel mailing list
>> Devel at lists.planet-lab.org
>> https://lists.planet-lab.org/mailman/listinfo/devel
>>
>
> _______________________________________________
> Devel mailing list
> Devel at lists.planet-lab.org
> https://lists.planet-lab.org/mailman/listinfo/devel
>