Comments (6)
prithuadhikary
commented on June 18, 2024
Hello Oscar,
Please mention which api you are consuming. But FYI, the public key
fingerprint sent in the payload is used to identify the private key to be
used for decrypting the payload at the sever side. Furthermore, as far as I
know we do not even store or receive the certificate being used by the
client for encrypting the payload at server side, so it is not possible to
identify the private key based on certificate fingerprint.
So IMHO, setting the public key fingerprint in the payload should resolve
your issue. If you scan through the code you would see it being computed as
the SHA2 digest of the public key, encoded as ASN.1 octet sequence.
Hope this helps.
Thanks and Regards,
Prithu
…On Fri, 22 Nov, 2019, 8:12 AM Oscar, ***@***.***> wrote:
We have done client implementation encryption for instance provisioning,
not in java but in go. we use all test sample and test case to verify our
implementation. Everything went well until we hit api. Failed on first
step: Fingerprint verification. The fact is the fingerprint is for public
certificate, not for key. The term "Pulbickey fingerprint" is confused.
Mastercard api require fingerprint is for certificate, not for the public
key generated from certificate. It would be good on documentation comments
it out or example for that.
—
You are receiving this because you are subscribed to this thread.
Reply to this email directly, view it on GitHub
<#7?email_source=notifications&email_token=ABWKM2XVTNXCCE7QKS4OOATQU5BI3A5CNFSM4JQK4W32YY3PNVWWK3TUL52HS4DFUVEXG43VMWVGG33NNVSW45C7NFSM4H3IVSEQ>,
or unsubscribe
<https://github.com/notifications/unsubscribe-auth/ABWKM2XNILKDHHS2Y55JU3DQU5BI3ANCNFSM4JQK4W3Q>
.
from client-encryption-java.
jaaufauvre
commented on June 18, 2024
The term "Pulbickey fingerprint" is confused.
It would be good on documentation comments it out or example for that.
This project uses "encryption key fingerprint" or "encryption certificate fingerprint" to designate what value to use as key identifier.
There should be no confusion here. Can you please provide a link to the documentation you are talking about?
See also:
from client-encryption-java.
ypwu1
commented on June 18, 2024
@jaaufauvre we were working on push-provisioning which uses mastercard api indirectly. And I used another mastercard-api-client-tutorial as reference.
from client-encryption-java.
ypwu1
commented on June 18, 2024
@jaaufauvre Golang is getting as popular as other main-stream programming language, Is there any plan for mastercard to build standard api client in go? if so, I would like to contribute.
from client-encryption-java.
ech0s7r
commented on June 18, 2024
we were working on push-provisioning which uses mastercard api indirectly. And I used another mastercard-api-client-tutorial as reference.
Hi @ypwu1,
Some of the Mastercard services require the fingerprint computed from the public key, some other from the certificate. You can setup/generate the fingerprint within the library by setting properly the service configuration. In this page we maintain a set of predefined service configurations for the MC services that requires encryption/decryption.
We will review the service documentation you are integrating with, and check where the naming inconsistency could be. Thank you for reporting it.
Golang is getting as popular as other main-stream programming language, Is there any plan for mastercard to build standard api client in go? if so, I would like to contribute.
Is your Go library hosted on GitHub?
from client-encryption-java.
jaaufauvre
commented on June 18, 2024
Hi @ypwu1, can we close this one?
from client-encryption-java.
Related Issues (20)
- AES-GCM and AES-CBC test jweObject are wrong(interchanged)
- [BUG] Can't set JSON engine in JsonParser HOT 2
- Adding method for specifying the kid
- [REQ] add maven wrapper functionality HOT 2
- [REQ] add Gradle Enterprise Exce HOT 2
- [REQ] Support json path wildcards HOT 4
- [BUG] Can not decrypt JSON array over JWE entire payload mode HOT 1
- Problem on response decryption HOT 1
- [REQ] InputStream param for loadDecryptionKey(), loadEncryptionCertificate() HOT 2
- [REQ] Make it possible to set encryption public key directly without a certificate
- [REQ] Support A128GCM and other A GCM encryption method
- [REQ] request to add overloaded public methods in EncryptionUtils to take InputStream as parameter HOT 2
- [REQ] Feature Request Being able to incorporate visa api HOT 1
- [REQ] Patching vulnerable dependencies HOT 1
- [BUG] Encryption key requires decryption key HOT 2
- [BUG] Service Configurations for Client Encryption Java MDES Token Connect - missing Push Multiple Accounts configuration HOT 2
- "Sonar Check" CI build step fails HOT 1
- Readme Update HOT 1
- [REQ] Update vulnerable dependency com.jayway.jsonpath:json-path HOT 1
- Fix code scanning alert - Encryption algorithms should be used with secure mode and padding scheme
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from client-encryption-java.