Yubico Forum

Hi!

Installed the OpenID server for the yubikey. Downloaded the source from svn. Says its revision 4.

OS: Vista 64bit (sp1)
Webbserver: IIS7
PHP version: 5.2.6

I can log in through server.php and it says im logged in.
When i try "http://www.openidenabled.com/resources/openid-test/checkup" i get the following error

------------------------
Checking https://xxxxxxx.dyndns.org/server.php/i ... xxxxxxxxxx ...
Fetching https://xxxxxxx.dyndns.org/server.php/i ... xxxxxxxxxx
Yadis links found at https://xxxxxxx.dyndns.org/server.php/i ... xxxxxxxxxx. Your server is at https://xxxxxxx.dyndns.org/server.php.
Attempting to associate with the server.
kvToSeq warning: Line 1 does not contain a colon: '<br />\n<b>Fatal error</b>: Define Auth_OpenID_RAND_SOURCE as null to continue with an insecure random number generator. in <b>C:\\Inetpub\\wwwroot\\Auth\\OpenID\\CryptUtil.php</b> on line <b>52</b><br />\n'
kvToSeq warning: In line 2, ignoring leading or trailing whitespace in value ' Define Auth_OpenID_RAND_SOURCE as null to continue with an insecure random number generator. in <b>C:\\Inetpub\\wwwroot\\Auth\\OpenID\\CryptUtil.php</b> on line <b>52</b><br />': '<br />\n<b>Fatal error</b>: Define Auth_OpenID_RAND_SOURCE as null to continue with an insecure random number generator. in <b>C:\\Inetpub\\wwwroot\\Auth\\OpenID\\CryptUtil.php</b> on line <b>52</b><br />\n'
Getting association: missing key in response from https://xxxxxxx.dyndns.org/server.php: assoc_type
Server contact failed.

Fail Fail. https://xxxxxxx.dyndns.org/server.php/i ... xxxxxxxxxx is not a working OpenID.
---------------------------

Any idea what im doin wrong?

REGARDS
Anders

Can you try running the 'detect.php' script?

E.g., http://yourserver/path/detect.php

It should print what kind of randomness generator the server will use.

I suspect that JanRain's example server haven't been tested under IIS7, under Linux it reads from /dev/urandom but this obviously doesn't work well under Windows.

Possibly you'll need to set Auth_OpenID_RAND_SOURCE to null to use the insecure generator, until you can figure out a better entropy source for the server under Windows.

Good luck!

/Simon

Hi Simon!

You where right on spot.

The OpenID suite from JanRain points to a randomness source specific to Linux/Unix/Mac "/dev/urandom".

Just changed one line in CryptUtil.php
from
define('Auth_OpenID_RAND_SOURCE', '/dev/urandom');
to
define('Auth_OpenID_RAND_SOURCE', null);

Thx alot!

REGARDS
Anders