You are viewing a plain text version of this content. The canonical link for it is here.
Posted to notifications@apisix.apache.org by "thor533 (via GitHub)" <gi...@apache.org> on 2023/04/12 08:02:19 UTC
[GitHub] [apisix] thor533 opened a new issue, #9294: failed to sign jwt
thor533 opened a new issue, #9294:
URL: https://github.com/apache/apisix/issues/9294
### Description
i use the jwt-auth plugin,i set the config such as :
{ "username": "Jwt_auth", "plugins": { "jwt-auth": { "algorithm": "RS256", "base64_secret": true, "disable": false, "exp": 100, "key": "yc", "private_key": "-----BEGIN RSA PRIVATE KEY-----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-----END RSA PRIVATE KEY-----", "public_key":"-----BEGIN CERTIFICATE-----MIIDsjCCApqgAwIBAgIIWtDrOMZUC/EwDQYJKoZIhvcNAQELBQAwejELMAkGA1UEBhMCQ04xFzAVBgNVBAoTDktleU1hbmFnZXIub3JnMTEwLwYDVQQLEyhLZXlNYW5hZ2VyIFRlc3Q
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
ZKXbFP5Z/7/YIJ64WzVprhZNqTTulgSi252+9L6L7IzLTpHxVrEPd27ooUaVbIsYFzQwtuvaFWepASaIjvFIOpx5yZ7v797Qae+e+mE44Nca1fjMPSu1VXxUv20iT4qyHT8=-----END CERTIFICATE-----", "secret": "yc" } }, "create_time": 1679901133, "update_time": 1679968952, "consumerNameStr": "jwt-auth" }
ps： The certificate is correct ,is pem format.
when i request the api：use postman:
http://10.4.16.105:9080/apisix/plugin/jwt/sign?key=yc
the response is ：failed to sign jwt
error log:
*9621032 [lua] jwt-auth.lua:328: sign_handler(): failed to sign jwt, err: signer error: no start line, client: 192.168.88.66, server: _, request: "GET /apisix/plugin/jwt/sign?key=yc123 HTTP/1.1", host: "10.4.16.105:9080"
please help me! thanks !
### Environment
- APISIX version (run `apisix 2.15-alpine`):
- Operating system (run `uname -a`):
- OpenResty / Nginx version (run `openresty -V` or `nginx -V`):
- etcd version, if relevant (run `curl http://127.0.0.1:9090/v1/server_info`):
- APISIX Dashboard version, if relevant:
- Plugin runner version, for issues related to plugin runners:
- LuaRocks version, for installation issues (run `luarocks --version`):
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@apisix.apache.org.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [apisix] nic-6443 commented on issue #9294: failed to sign jwt
Posted by "nic-6443 (via GitHub)" <gi...@apache.org>.
nic-6443 commented on issue #9294:
URL: https://github.com/apache/apisix/issues/9294#issuecomment-1506196170
Your certificate and private key are invalid. In PEM format, the starting and ending lines before and after the content section need to be separated by newline.
For example:
```
-----BEGIN RSA PRIVATE KEY-----\nMIIEp.....
```
rather than:
```
-----BEGIN RSA PRIVATE KEY-----MIIEp.....
```
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@apisix.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [apisix] thor533 commented on issue #9294: failed to sign jwt
Posted by "thor533 (via GitHub)" <gi...@apache.org>.
thor533 commented on issue #9294:
URL: https://github.com/apache/apisix/issues/9294#issuecomment-1506266235
> Your certificate and private key are invalid. In PEM format, the starting and ending lines before and after the content section need to be separated by newline. For example:
>
> ```
> -----BEGIN RSA PRIVATE KEY-----\nMIIEp.....
> ```
>
> rather than:
>
> ```
> -----BEGIN RSA PRIVATE KEY-----MIIEp.....
> ```
big boss,Can you help me with this problem? Thank you very much
##9202
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@apisix.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [apisix] thor533 commented on issue #9294: failed to sign jwt
Posted by "thor533 (via GitHub)" <gi...@apache.org>.
thor533 commented on issue #9294:
URL: https://github.com/apache/apisix/issues/9294#issuecomment-1506233601
> Your certificate and private key are invalid. In PEM format, the starting and ending lines before and after the content section need to be separated by newline. For example:
>
> ```
> -----BEGIN RSA PRIVATE KEY-----\nMIIEp.....
> ```
>
> rather than:
>
> ```
> -----BEGIN RSA PRIVATE KEY-----MIIEp.....
> ```
okey you are right,thank you very much!
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@apisix.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [apisix] nic-6443 closed issue #9294: failed to sign jwt
Posted by "nic-6443 (via GitHub)" <gi...@apache.org>.
nic-6443 closed issue #9294: failed to sign jwt
URL: https://github.com/apache/apisix/issues/9294
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@apisix.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org