Subject: | |
Date: | Mon, 17 Mar 2008 12:36:01 -0500 |
To: | <bug-Digest-SHA1 [...] rt.cpan.org> |
From: | "Johnny Gan" <jgan [...] hrsmart.com> |
Try to include any information you think might help the developer isolate,
reproduce and fix your problem.
Be sure to include at least the following information:
* Distribution name and version (For example,
"DBIx-SearchBuilder-0.46")
Digest::SHA1 object version 2.02
* Perl version (Find this by running the command perl -v)
This is perl, v5.8.3 built for i386-linux-thread-multi
* Operating System vendor and version (Find this by running the
command uname -a)
Linux weasel 2.4.27.20070118 #1 SMP Thu Jan 18 10:08:22 CST 2007 i686
GNU/Linux
Other things that are often helpful:
* Details about your operating environment that might be related to
the issue being described
Try to use SHA1 to create Web Services Security UsernameToken by the
algorithm :
Base64(SHA1(nonce.created.password)).
Got the different result with soapUI2.02 software ( which created by Java)
* Exact cut and pasted error or warning messages
No
* The shortest, clearest code you can manage to write which reproduces
the bug described.
If I used same nonce and created create password, it should get same result.
$nonce = 'Y1Pvz2Vq167CweAH2w75fg==';
$created = '2008-03-14T23:47:23.219Z';
my $string = $nonce.$created.$this->{Password};
print STDERR "string: $string\n";
print STDERR "p0:wDjBgl2VykWbH9IIviEmGaaMQ6c=\n"; #this passward is
created by soapUI2.02
my $password =
MIME::Base64::encode_base64(HRsmart::SHA1::sha1($nonce.$created.$this->{Pass
word})); #our result is totally different with above one.
All this code is running within the nonce life period.
* A patch against the latest released version of this distribution
which fixes this bug.
Can you tell me why we got different result, for ours password cannot pass
WSS usernametoken verify.
Thanks,
Johnny Gan
From HRsmart Inc
Keep employees motivated and engaged with effective Workforce Management! An
integration of HRsmart's Applicant Tracking Solution with its Career
Development and Succession Planning Solution enables organizations to
quickly view their internal talent pool to match open positions with
existing talent first, helping to encourage employee mobility.