I'm willing to give this a go.

CommentFileSizeAuthor
#3 openid_provider.patch5.84 KBjax
#2 openid_provider.patch4.87 KBjax
#1 openid_provider.patch4.47 KBjax

Comments

jax’s picture

jax commented
Title: Implement HMAC-256 support. » Implement HMAC-256/DH-256 support.
Status: Active » Needs work
StatusFileSize
new openid_provider.patch4.47 KB

This patch uses the PHP5 only hash() and hash_hmac() functions. Now the provider can do DH-SHA1 and DH-SHA256 association. I need to investigate when the HMAC-SHA256 assoc_type is used.

You can now use openid_provider with the Zend_OpenID_Consumer which uses DH-SHA256 when talking to an OpenID 2.0 provider.

Anyone knows any openID client that can be used to test all the combinations?

jax’s picture

jax commented
StatusFileSize
new openid_provider.patch4.87 KB

This should add hmac-256 support when there isn't a session_type set. It's not tested though. Some cleanup of the patch is needed as well.

jax’s picture

jax commented
Status: Needs work » Needs review
StatusFileSize
new openid_provider.patch5.84 KB

Patch has been cleaned up.

walkah’s picture

walkah commented
Status: Needs review » Fixed

committed. thanks, Jax!

Anonymous’s picture

Anonymous (not verified) commented
Status: Fixed » Closed (fixed)

Automatically closed -- issue fixed for two weeks with no activity.