Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Signatur of likes are invalid #6

Open
annando opened this issue Apr 29, 2014 · 0 comments
Open

Signatur of likes are invalid #6

annando opened this issue Apr 29, 2014 · 0 comments
Labels

Comments

@annando
Copy link

annando commented Apr 29, 2014

There is a problem in the communication between Diaspora and Friendica. When a "like" is arriving at Friendica, the signatur seems to be invalid.

For example, this XML couldn't be validated:

<XML>
  <post>
    <like>
      <positive>true</positive>
      <guid>afc9e943b3d89920</guid>
      <target_type>Post</target_type>
      <parent_guid>e379342bbfe40682</parent_guid>
      <parent_author_signature>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</parent_author_signature>
      <author_signature>Y52IOyiShOqMxJJX1zwRgoLy39lunlonHolDSOlqjWWhmwfcGEV+Tsz6nMPzVTXrCWUbcX4xY/5wtmhPn3lOlGVeT0AcXyuRLE4d4K44u4NHy/L0TbeIEZKyyzYgCzN0Z5PIpCgC04s4MaHQ6xCvC6ILWbbpz1/0dT9wKdbfLtoy3L0wzo4oeBMnkEfXCd8x99XYMGGf3znrEYtg98n/0IHLrBIV668xd75r3Job+YUOH0uR69x4wmFRTx2XTJl+Qh2sIamHGQOTJOsGonSE4wWGFRwGTosk3vMB86c1+i7nBpnry+t+8nMoACaUOGKsspF+OpuU5bBeLFQpjrF53jCieDRf844SwLVPXgPtJCgoI4zIL74hxP/own7cAxyQsIHofJVVILYhvRxQNyi9/MZAPwQGulUjWkVp5C73/aNeJlpAul6ZqUqsAJzZvwHvyZ+kcBEBvAWkItls9Dbk15kfjXm6DV7kviXgk3ku+A3ACou2fK+tAc3EzRj6/nM7mF7Wo2Box7dRZtHxHXChwgnYXUINP94iun8mHIWG5TrGQRAHMRQUw5ErG6d5YK2r3R8RCSZXaPA6WomZzWwmVKOqQ2HPnHZ7vOyvpx7R2o062suj/QuhG9YLpT/qx1LhdgPmrG/byhpLgUvdUh2fPHKi/YXfSwJpZg6xsg3DzsI=</author_signature>
      <diaspora_handle>gruener_apfel@pod.geraspora.de</diaspora_handle>
    </like>
  </post>
 </XML>

Friendica tried to check the signature against this public key:

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

Strange thing is: Comments, photos and posts are accepted - only likes are a problem. But: Sending likes is working (and they are accepted from Diaspora)

Question is:

  • is this XML working at Diaspora?
  • is it the correct public key?
  • which public key has to be taken to validate the signature from above?
  • is there test data to check the routines from Friendica?
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

No branches or pull requests

2 participants