Zend Framework

Signature is invalid for all requests that have space in any of the signed query parameters

Details

  • Type: Bug Bug
  • Status: Resolved Resolved
  • Priority: Critical Critical
  • Resolution: Fixed
  • Affects Version/s: 1.8.0, 1.8.1, 1.8.2, 1.8.3, 1.8.4, 1.9.0, 1.9.1, 1.9.2, 1.9.3, 1.9.4, 1.9.5, 1.9.6
  • Fix Version/s: 1.9.7
  • Labels:
    None

Description

Using Amazon_Ec2 Query API requests will fail with the follwing exception:

exception 'Zend_Service_Amazon_Ec2_Exception' with message 'The request signature we calculated does not match the signature you provided. Check your AWS Secret Access Key and signing method. Consult the service documentation for details.'

If any of the signed parameters has space it in. This is due to usage of urlencode() instead of rawurlencode() when generating the string-to-sign, despite Amazon's explicit demand that spaces will be encoded as %20 (=rawurlencode()) and not as '+' (=urlencode()).

Activity

Hide
Shahar Evron added a comment -

Patch against SVN rev. 19975 is attached.

Show
Shahar Evron added a comment - Patch against SVN rev. 19975 is attached.
Hide
Jon Whitcraft added a comment -

Strange enough I ran into this problem myself a few days ago and fixed it but I havn't had time to post file a bug and submit the patch. This was done with r19977 (trunk) and r19978 (release branch)

Show
Jon Whitcraft added a comment - Strange enough I ran into this problem myself a few days ago and fixed it but I havn't had time to post file a bug and submit the patch. This was done with r19977 (trunk) and r19978 (release branch)

People

Vote (0)
Watch (0)

Dates

  • Created:
    Updated:
    Resolved: