[OpenSIPS-Users] Fwd: STIR/Shaken payload issue.

[Sunil More]

Hello All,

I tried the same with Opensips version 3.1.2 , Still the same result. The
Payload is not a valid JSON.

version: opensips 3.1.2 (x86_64/linux)
flags: STATS: On, DISABLE_NAGLE, USE_MCAST, SHM_MMAP, PKG_MALLOC, Q_MALLOC,
F_MALLOC, HP_MALLOC, DBG_MALLOC, FAST_LOCK-ADAPTIVE_WAIT
ADAPTIVE_WAIT_LOOPS=1024, MAX_RECV_BUFFER_SIZE 262144, MAX_LISTEN 16,
MAX_URI_SIZE 1024, BUF_SIZE 65535
poll method support: poll, epoll, sigio_rt, select.
git revision: 539ab0b3a
main.c compiled on 05:43:20 May 24 2021 with gcc 7

Regards,
Sunil More

---------- Forwarded message ---------
From: Sunil More <sunil.more64sinfo at gmail.com>
Date: Thu, 20 May 2021 at 15:55
Subject: STIR/Shaken payload issue.
To: users at lists.opensips.org <users at lists.opensips.org>


Hello All,



I was working to use stir shaken module. The certificates are put in place
and Identity Header is also created. However the Identity when tried to put
on JWT.io for validation , I can observe that the payload is not good.

Here is the identity Heade
*Identity*:
eyJhbGciOiJFUzI1NiIsInBwdCI6InNoYWtlbiIsInR5cCI6InBhc3Nwb3J0IiwieDV1IjoiaHR0cHM6Ly9hcHBzLnNhbWVzcGFjZS5jb20vc2VydmVyLmNydCJ9
.
eyJhdHRlc3QiOCIiwiZGVzdCI6eyJ0biI6WyI5MTk1MDMzMzgyNzUiXX0sImlhdCI6MTYyMDkxMDc3Nywib3JpZyI6eyJ0biI6IjkxOTUwMzMzODI3NiJ9LCJvcmlnaWQiOiJkc2FkYXNhc2Zkcy1kc2FkYXNkLXNWRzIn0
.JzYHlbStXK7gpmRWVZY_IC8VmeZfaKWBzGTOfGU82OQ3w28lctaYv-
YAzBdjqjUGJKISid327KSzUGGvpXYBSg;info=<https://apps.samespace.com/server.crt
>;ppt="shaken"


After JWT.io
Header for algorithm and token type  looks ok ..
{

  "alg": "ES256",

  "ppt": "shaken",

  "typ": "passport",

  "x5u": "https://apps.samespace.com/server.crt"

}

However payload looks like this which is probably some invalid JSON, I am
not sure what could cause this.

"{\"attest\"8\"\"�&FW7B#��'F�#��#�\u0013�S\u0003333�#sR%���&�\u0017B#�\u0013c#\u0003�\u0013\u0003ssr�&�&�r#��'F�#�#�\u0013�S\u0003333�#sb'��&�&�v�B#�&G6\u0016F\u00176\u00176fG2�G6\u0016F\u00176B�5ds\"}"

Here is the code snippet used .


stir_shaken_auth("B", $var(origid),$var(cert), $var(privKey),"
https://apps.samespace.com/server.crt","919503338276","919503338275");



I am using opensips version as below



version: opensips 3.1.1 (x86_64/linux)

flags: STATS: On, DISABLE_NAGLE, USE_MCAST, SHM_MMAP, PKG_MALLOC, Q_MALLOC,
F_MALLOC, HP_MALLOC, DBG_MALLOC, FAST_LOCK-ADAPTIVE_WAIT

ADAPTIVE_WAIT_LOOPS=1024, MAX_RECV_BUFFER_SIZE 262144, MAX_LISTEN 16,
MAX_URI_SIZE 1024, BUF_SIZE 65535

poll method support: poll, epoll, sigio_rt, select.

git revision: 229ec0793

main.c compiled on 11:50:44 Jan 15 2021 with gcc 7



Kindly let me know if there is something wrong that I could be doing. I
checked the sample from
*https://transnexus.com/whitepapers/understanding-stir-shaken/
<https://transnexus.com/whitepapers/understanding-stir-shaken/>*

The Identity from this example shows a good payload.





Regards,

Sunil More

Phone : 919503338275

Sent from Mail <https://go.microsoft.com/fwlink/?LinkId=550986> for Windows
10
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.opensips.org/pipermail/users/attachments/20210524/77c2ba02/attachment.html>