0

"Direct signature verification failed" using openid4java

Trying to use openid4java against Yahoo. Google's system is working fine, however with Yahoo, I'm getting

Verification failed for: https://me.yahoo.com/a/ [random string] reason: Direct signature verification failed.

I've gone through this blog:
http://eddevelop.blogspot.com/2008/11/open...penid4java.html

And those linked there. I have my XRDS setup correctly, and Yahoo no longer complains about an invalid website -- everything looks good there..

However, when the request comes back, I get that Direct signature verification failed message, and VerificationResult.getVerifiedId() returns null.

Help?

by
1 Reply
  • Hi Darrell,

    Can you please send the complete HTTP request and response
    headers so we can help check from our side?

    You may also need to contact openid4java mailing list to
    see if they have any hint on this because we don't actually
    know how openid4java is implemented.

    Thanks,
    Yu Wang
    Yahoo! Membership team
    0

Recent Posts

in OpenID General Discussion