Re: Problems with BAD_SIGNATURE

2008-06-25T18:36:36+01:00

Got this working now ... why are (almost) all the most infuriating problems the easiest solutions :

Code:

byte[] dataBuffer = System.Text.Encoding.ASCII.GetBytes(sParams);

should read:

Code:

byte[] dataBuffer = System.Text.Encoding.UTF8.GetBytes(sParams);

Statistics: Posted by Jester — Wed Jun 25, 2008 6:36 pm

Problems with BAD_SIGNATURE

2008-06-25T14:00:51+01:00

I am having problems implementing the signature checking in C#. I have used the Microsoft MSDN hmac SHA1 example to encode the parameters with no luck. All I get is the dreaded BAD_SIGNATURE.

Any ideas?

_authid and otp was populated correctly and without the &h... it works STATUS=OK

Code:

            String sParams = "id=" + _authId + "&otp=" + otp;
            String sAPIKeyUtf8 = base64Decode(APIKEY);
            String shmac;

            HMACSHA1 hmacsha1 = new HMACSHA1();
            hmacsha1.Key = Encoding.ASCII.GetBytes(sAPIKeyUtf8);
            byte[] dataBuffer = System.Text.Encoding.ASCII.GetBytes(sParams);
            byte[] hashBytes = hmacsha1.ComputeHash(dataBuffer);
            shmac = Convert.ToBase64String(hashBytes);

            HttpWebRequest request = (HttpWebRequest)WebRequest.Create(YUBICO_AUTH_SRV_URL + _authId + "&otp=" + otp + "&h=" + shmac);

Statistics: Posted by Jester — Wed Jun 25, 2008 2:00 pm

Yubico Forum

Re: Problems with BAD_SIGNATURE

Problems with BAD_SIGNATURE