Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Remove spid-testenv2 and use spid-demo #52

Open
bfabio opened this issue Aug 26, 2021 · 4 comments
Open

Remove spid-testenv2 and use spid-demo #52

bfabio opened this issue Aug 26, 2021 · 4 comments
Labels
enhancement New feature or request good first issue Good for newcomers help wanted Extra attention is needed

Comments

@bfabio
Copy link
Member

bfabio commented Aug 26, 2021

spid-testenv2 is deprecated. We need to use spid-demo from italia/spid-saml-check as its replacement.

@f4bb1o
Copy link

f4bb1o commented Sep 9, 2021

How can i replace spid-testenv2 with spid-demo? i got always {"error":"Missing idpIssuer inside configuration"} error.
what is the procedure?

Thank you

@bfabio
Copy link
Member Author

bfabio commented Sep 10, 2021

Hi @f4bb1o, we need to investigate it and come up with a PR. If you are willing to work on it, it would be great :)

@bfabio bfabio added enhancement New feature or request good first issue Good for newcomers help wanted Extra attention is needed labels Sep 21, 2021
@peppelinux
Copy link
Member

@f4bb1o Is right!

I faced this issue here
089c58e

That's the commit to replace the demo idp, It fails, miserely ...

@donateoa
Copy link

donateoa commented Nov 3, 2021

someone else get the error

AuthnRequest Signature validation

when performs the AuthNRequest Check Strict with https://demo.spid.gov.it/validator?

I get the same error using a local docker container with spid-saml-check.

The certificate and private key are generated with:

  • SHA-256
  • RSA 2048
    openssl req -nodes \ -new \ -x509 \ -sha256 \ -days 365 \ -newkey rsa:2048 \ -subj "/C=IT/ST=State/L=City/O=Acme Inc. /OU=IT Department/CN=spid-express.selfsigned.example" \ -keyout certs/key.pem \ -out certs/cert.pem
    The same errors happen when try to validate any response
    2021-11-03T14:46:51.829Z [spid-express] error: Spid Authentication|Authentication Error|ERROR=Error: Invalid signature|ISSUER=https://localhost:8443|REDIRECT_TO=/error?errorMessage=Error: Invalid signature

did anyone face the same issue?

Reference:
[email protected]

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request good first issue Good for newcomers help wanted Extra attention is needed
Projects
None yet
Development

No branches or pull requests

4 participants