Signature validation failed for: 'https://instance.tld/actor

Hit the same issue

[2020-09-05 00:01:53,020] DEBUG: HTTP START [<aiohttp.client.ClientSession object at 0x7fe3e2e02550>], [TraceRequestStartParams(method='GET', url=URL('https://m.cmx.im/users/MoiraY'), headers=<CIMultiDict('Accept': 'application/activity+json')>)]
[2020-09-05 00:01:53,260] DEBUG: HTTP END [<aiohttp.client.ClientSession object at 0x7fe3e2e02550>], [TraceRequestEndParams(method='GET', url=URL('https://m.cmx.im/users/MoiraY'), headers=<CIMultiDict('Accept': 'application/activity+json')>, response=<ClientResponse(https://m.cmx.im/users/MoiraY) [200 OK]>
<CIMultiDictProxy('Date': 'Sat, 05 Sep 2020 00:01:53 GMT', 'Content-Type': 'application/activity+json; charset=utf-8', 'Transfer-Encoding': 'chunked', 'Connection': 'keep-alive', 'Set-Cookie': '__cfduid=d6acbcf77ec5d3ffe8d72dfff5316b8c81599264113; expires=Mon, 05-Oct-20 00:01:53 GMT; path=/; domain=.cmx.im; HttpOnly; SameSite=Lax; Secure', 'X-Frame-Options': 'DENY', 'X-Content-Type-Options': 'nosniff', 'X-XSS-Protection': '1; mode=block', 'Vary': 'Accept, Accept-Encoding, Origin', 'Cache-Control': 'max-age=180, public', 'Content-Encoding': 'gzip', 'ETag': 'W/"0bbc0d3a02e87c461f32187d18d8dc8a"', 'X-Request-Id': 'b9ba8202-81e2-432c-87bf-e603eb685bc1', 'X-Runtime': '0.031468', 'X-Cached': 'EXPIRED', 'Strict-Transport-Security': 'max-age=15552000', 'CF-Cache-Status': 'DYNAMIC', 'cf-request-id': '04fd2ad9a60000e4d9fd201200000001', 'Expect-CT': 'max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"', 'Server': 'cloudflare', 'CF-RAY': '5cdbada2aafbe4d9-LAX')>
)]
[2020-09-05 00:01:53,263] DEBUG: actor key: RsaKey(n=25331742071611827734705367832663483894635920331575880193244390642984115874517578882555054291572683908156857935991609476040319967567454830490175082116002408848210343507215928588790361175762834888411917631371590528068924241908248736626139339909783322215192406749706200705758190034282502900416444644214228740463506672766924044507934326323911413810922562227479630674509123040091034432789293395839623481664545199659230516651271063039420674105896384729864089692424257609079943407327616187464864056301907975168867979601525886367418301829525628912508981069878029884096458116533148679780371199016529571950201211405493907920313, e=65537)
[2020-09-05 00:01:53,264] DEBUG: sigdata: {'headers': ['(request-target)', 'host', 'date', 'digest'], 'keyId': 'https://mastodon-relay.moew.science/actor', 'algorithm': 'rsa-sha256', 'signature': 'GLBXOdPmRK3B4cIcpSGismhJ0S0FgUqDKDeZwFpHIoqwgyMVqLfIa6vJlBnadr/OEcTeiWLUwDjtLuLSYW7o99R+tShxC3wd0xW80mhn00yoxrqI+NtixYsHKOkvl6MB5xnFRzOqrelCa3ouZM/SQ6Tx24KtweAnel3w8kmzMjgWraHClZc6T8YuxvwxX3CQCSLMJ2fssnRegtSg0V/Vubs+8Jj7Mk6rj+Z3i1gaglHtRH6g3kTL//HgZ+KmNOmW7KtPMuBJERCueNNHNCGzpnu/3ZLFAPdJWiH5v3gNo0IQw4bld3Zbluok7A7tMGvBjwd/CkH2XjbaOUIGcBuHAQ=='}
[2020-09-05 00:01:53,264] DEBUG: sigstring: '(request-target): post /inbox\nhost: relay.ccp.ovh\ndate: Sat, 05 Sep 2020 00:01:52 GMT\ndigest: SHA-256=mmL4nzYN+UfJHct9phCIS/1jSrBNdHPiCsaZ6KKPPwI='
[2020-09-05 00:01:53,264] DEBUG: sign alg: 'rsa', hash alg: 'sha256'
[2020-09-05 00:01:53,265] DEBUG: validates? False
[2020-09-05 00:01:53,266] INFO: Signature validation failed for: 'https://m.cmx.im/users/MoiraY'

Same issue

It's because that m.cmx.in uses signed fetch mode. the relay must signing request for validation

Should have been fixed with !23 (merged)

closed

Signature validation failed for: 'https://instance.tld/actor

Designs

Child items 0

Activity