cloudstack-users mailing list archives

Hi everyone,

Quick update, after trying a new route after looking at some code on github I found my issue.
The code I reviewed was Jason Hancock's code (https://github.com/jasonhancock/cloudstack-php-client/blob/master/src/BaseCloudStackClient.php)

My issue was I was rebuilding my query after I had signed it. I needed to keep my sorted query
and dump it into my final url. The below function would work provided I had the apikey sorted
in my $cmd variable.

 function cloudstack_formattedUrl($baseUrl, $api, $cmd, $signature) {
 
  $url = $baseUrl . '?' . $cmd . '&signature=' .  $signature;

  return $url;
 }

Thanks,
Blake Ferkingstad

-----Original Message-----
From: Blake Ferkingstad [mailto:bferkingstad@acentek.net] 
Sent: Monday, March 30, 2015 11:51 AM
To: users@cloudstack.apache.org
Subject: RE: API Signing Issue

Hi Nux!,

Thanks for the link, we will look into that.

It's just an interesting issue, part of the fun of it though. I will keep working on it and
post any findings.

Thanks,
Blake

-----Original Message-----
From: Nux! [mailto:nux@li.nux.ro]
Sent: Monday, March 30, 2015 11:35 AM
To: users@cloudstack.apache.org
Subject: Re: API Signing Issue

You might be able to "bypass" the problem by using the integration port (make sure to firewall
it as it allows non-auth requests), though I'd also be curious for a solution.

https://cloudstack.apache.org/docs/en-US/Apache_CloudStack/4.0.0-incubating/html-single/API_Developers_Guide/#enabling-port-8096

--
Sent from the Delta quadrant using Borg technology!

Nux!
www.nux.ro

----- Original Message -----
> From: "Blake Ferkingstad" <bferkingstad@acentek.net>
> To: users@cloudstack.apache.org
> Sent: Monday, 30 March, 2015 16:17:23
> Subject: API Signing Issue

> Hello everyone,
> 
> 
> 
> I have a question on my API Signing code. The code below I have tested 
> on commands like createDomain, listTemplates, and listServices. Those 
> all run like expected, but I am running into trouble with createAccount.
> 
> 
> 
> function cloudstack_sign_sort($cmd)
> 
> {
> 
>  $commands = explode('&', $cmd);
> 
>  sort($commands);
> 
>  $sort = implode('&', $commands);
> 
> 
> 
>  return $sort;
> 
> }
> 
> 
> 
> function cloudstack_formatCmd($api, $cmd) {
> 
>  $str = 'apiKey=' . $api . '&' . $cmd;
> 
>  $str = strtolower(cloudstack_sign_sort($str));
> 
> 
> 
>  return $str;
> 
> }
> 
> 
> 
> function cloudstack_encrypt($cmd, $secret) {
> 
>  $hash = hash_hmac('sha1', $cmd, $secret, true);
> 
>  $hash = base64_encode($hash);
> 
> 
> 
>  return urlencode($hash);
> 
> }
> 
> 
> 
> function cloudstack_formattedUrl($baseUrl, $api, $cmd, $signature) {
> 
>  $url = $baseUrl . '?' . $cmd . '&apiKey=' . $api . '&signature=' . 
> $signature;
> 
> 
> 
>  return $url;
> 
> }
> 
> 
> 
> function cloudstack_sign($command, $api, $secret, $baseUrl) {
> 
>    $clean_command = substr($command, strpos($command, '?'));
> 
> 
> 
>    $newCmd = cloudstack_formatCmd($api, $clean_command);
> 
>    $signature = cloudstack_encrypt($newCmd, $secret);
> 
>    $url = cloudstack_formattedUrl($baseUrl, $api, $clean_command, 
> $signature);
> 
> 
> 
>    return $url;
> 
> }
> 
> 
> 
> When I run the command it returns for createAccount I get 'Error: 
> 401unable to verify user credentials and/or request signature'.
> 
> 
> 
> Is there something wrong with my code?
> 
> 
> 
> Thanks,
> 
> Blake Ferkingstad