[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[Handle-info] Local PUBKEY Authentication
Hey :)
I'm running an Handle Server locally for testing purposes and am facing
a problem when trying to authenticate myself locally via a PUBKEY.
I set up everything to work locally without communicating to the GHR as
described in Chapter 10 of the Technical Manual.
In Chapter 10.2 it is explained how to authenticate with a secret key:
'Create the new admin handle using the DBTool, and associate a secret
key (password) with it [...]' (Chapter 10.2 Technical Manual)
Which works with the admin tool.
However, later on in production I want to use the PUBKEY authentication
strategy. For example for the REST-API
challenge response framework (Chapter 14.6.4). An example implementation
can be found
here https://github.com/theNBS/handleserver-samples/tree/master/python
But this doesn't work yet.
I created an Admin Handle under 5678/ADMIN with four values:
100 HS_ADMIN 2021-05-20 08:26:32Z handle=5678/ADMIN; index=200; [create
hdl,delete hdl,create derived prefix,delete derived prefix,read
val,modify val,del val,add val,modify admin,del admin,add admin,list]
200 HS_VLIST 2021-05-20 08:26:32Z 300:5678/ADMIN
300 HS_PUBKEY 2021-05-20 08:26:32Z <SOME PUBKEY>
301 HS_SECKEY 2021-05-20 08:26:32Z password
Home prefixes where established as well (for 0.NA/5678 and 5678)
Neither with the admin tool, nor with the python script, nor the helper
scripts I am able to authenticate myself. I don't see any errors in the
logs nor the output of the admin tool. The REST API only returns a 401
Unauthorized.
However, when I run the helper script
'./bin/hdl-list 5678/ADMIN 300 config/privkey.bin 5678'
it states, that the prefix doesn't live here and the root info is missing.
I'm not sure what to make out of this information. The authentication
works with the secret key procedure and the prefix 5678 and 0.NA/5678
are home with the DBTool and Admintool.
Has someone a clue what I am missing or has been able to set this up
locally?
Best,
Christian
_______________________________________________
Handle-Info mailing list
Handle-Info@cnri.reston.va.us
http://www.handle.net/mailman/listinfo/handle-info