- From: Peter Williams <home_pw@msn.com>
- Date: Sun, 27 Nov 2011 10:51:15 -0800
- To: <andrei@fcns.eu>, "public-xg-webid@w3.org" <public-xg-webid@w3.org>
- Message-ID: <SNT143-W6285CCCA3CB0DEC9DD7D8392CD0@phx.gbl>
Went to https://auth.fcns.eu/auth/index.php?verbose=on Correctly failure case: * Checking ownership of certificate (public key matches private key)... PASSED (Reason: GENEROUS) * Checking if certificate contains URIs in the subjectAltName field... PASSED * Found 1 URIs in the certificate (a maximum of 3 will be tested). * Checking URI 1 (http://yorkporc.blogspot.com/2011/11/bob.html#me)... - Trying to fetch and process certificate(s) from webid profile... Testing if the modulus representation matches the one in the webid (found a modulus value)... Testing modulus... - FAILED WebID=c0e631e837407bb.......54ddfcfc173462d Cert =d5d5dc453432db7.......29f5aa1d15de651 I then removed the client cert and private key from the browser (delete at the UI, as would any user). I also loaded another key set from the .p12 format, one with the same name form (but different modulus). * Checking ownership of certificate (public key matches private key)... PASSED (Reason: GENEROUS) * Checking if certificate contains URIs in the subjectAltName field... PASSED * Found 1 URIs in the certificate (a maximum of 3 will be tested). * Checking URI 1 (http://yorkporc.blogspot.com/2011/11/bob.html#me)... - Trying to fetch and process certificate(s) from webid profile... Testing if the modulus representation matches the one in the webid (found a modulus value)... Testing modulus... - FAILED WebID=c0e631e837407bb.......54ddfcfc173462d Cert =d5d5dc453432db7.......29f5aa1d15de651 * Final conclusion: WebId does not match the certificate. Opened new browser instance, using File->New session. As user, received new self-signed server cert notice, and new prompt for client cert (with second mod). * Checking ownership of certificate (public key matches private key)... PASSED (Reason: GENEROUS) * Checking if certificate contains URIs in the subjectAltName field... PASSED * Found 1 URIs in the certificate (a maximum of 3 will be tested). * Checking URI 1 (http://yorkporc.blogspot.com/2011/11/bob.html#me)... - Trying to fetch and process certificate(s) from webid profile... Testing if the modulus representation matches the one in the webid (found a modulus value)... Testing modulus... PASSED WebID=c0e631e837407bb.......54ddfcfc173462d Cert =c0e631e837407bb.......54ddfcfc173462d Match found, ignoring futher tests! * Authentication successful! I will infer that my webid profile conforms, as does my identity credential minting service. > Date: Sun, 27 Nov 2011 12:45:16 +0100 > From: andrei@fcns.eu > To: public-xg-webid@w3.org > Subject: Updated IdP to new spec. > > Hello everyone, > > As of yesterday (Nov 26th), the authentication endpoint at > https://auth.fcns.eu will only accept WebIDs written using the new > specs. The tests it offers include a particular test for the old vs new > spec, so that users should have at least one way of being alerted of > this change. > > Also, the suite at http://webid.fcns.eu will now produce WebID profiles > using the new spec. Unfortunately, I haven't yet got around to updating > old profiles, so for testing purposes you might have to create a new one. > > As it is, I'm not aware of any bugs so far, but please report them as > soon as you find one! > > Have a great weekend! > > Andrei >
Received on Sunday, 27 November 2011 18:51:54 UTC