Yubico Forum
https://forum.yubico.com/

kvToSeq warning: Line 1 does not contain a colon:
https://forum.yubico.com/viewtopic.php?f=16&t=65
Page 1 of 1

Author:  anders [ Wed May 28, 2008 3:34 pm ]
Post subject:  kvToSeq warning: Line 1 does not contain a colon:

Hi!

Installed the OpenID server for the yubikey. Downloaded the source from svn. Says its revision 4.

OS: Vista 64bit (sp1)
Webbserver: IIS7
PHP version: 5.2.6

I can log in through server.php and it says im logged in.
When i try "http://www.openidenabled.com/resources/openid-test/checkup" i get the following error

------------------------
Checking https://xxxxxxx.dyndns.org/server.php/i ... xxxxxxxxxx ...
Fetching https://xxxxxxx.dyndns.org/server.php/i ... xxxxxxxxxx
Yadis links found at https://xxxxxxx.dyndns.org/server.php/i ... xxxxxxxxxx. Your server is at https://xxxxxxx.dyndns.org/server.php.
Attempting to associate with the server.
kvToSeq warning: Line 1 does not contain a colon: '<br />\n<b>Fatal error</b>: Define Auth_OpenID_RAND_SOURCE as null to continue with an insecure random number generator. in <b>C:\\Inetpub\\wwwroot\\Auth\\OpenID\\CryptUtil.php</b> on line <b>52</b><br />\n'
kvToSeq warning: In line 2, ignoring leading or trailing whitespace in value ' Define Auth_OpenID_RAND_SOURCE as null to continue with an insecure random number generator. in <b>C:\\Inetpub\\wwwroot\\Auth\\OpenID\\CryptUtil.php</b> on line <b>52</b><br />': '<br />\n<b>Fatal error</b>: Define Auth_OpenID_RAND_SOURCE as null to continue with an insecure random number generator. in <b>C:\\Inetpub\\wwwroot\\Auth\\OpenID\\CryptUtil.php</b> on line <b>52</b><br />\n'
Getting association: missing key in response from https://xxxxxxx.dyndns.org/server.php: assoc_type
Server contact failed.

Fail Fail. https://xxxxxxx.dyndns.org/server.php/i ... xxxxxxxxxx is not a working OpenID.
---------------------------

Any idea what im doin wrong?

REGARDS
Anders

Author:  Simon [ Wed May 28, 2008 5:57 pm ]
Post subject:  Re: kvToSeq warning: Line 1 does not contain a colon:

Can you try running the 'detect.php' script?

E.g., http://yourserver/path/detect.php

It should print what kind of randomness generator the server will use.

I suspect that JanRain's example server haven't been tested under IIS7, under Linux it reads from /dev/urandom but this obviously doesn't work well under Windows.

Possibly you'll need to set Auth_OpenID_RAND_SOURCE to null to use the insecure generator, until you can figure out a better entropy source for the server under Windows.

Good luck!

/Simon

Author:  anders [ Thu May 29, 2008 7:53 am ]
Post subject:  Re: kvToSeq warning: Line 1 does not contain a colon:

Hi Simon!

You where right on spot. :D

The OpenID suite from JanRain points to a randomness source specific to Linux/Unix/Mac "/dev/urandom".

Just changed one line in CryptUtil.php
from
define('Auth_OpenID_RAND_SOURCE', '/dev/urandom');
to
define('Auth_OpenID_RAND_SOURCE', null);

Thx alot!

REGARDS
Anders

Page 1 of 1 All times are UTC + 1 hour
Powered by phpBB® Forum Software © phpBB Group
https://www.phpbb.com/