SigningKey example in Readme

Hi,

Thanks for creating this library!

I am also trying to consume JIRA APIs. I am stuck with the following issue. In GetRSASignature method on line 378 (the following line) the process either crashes or returns null .

AsymmetricCipherKeyPair kp = (AsymmetricCipherKeyPair)new PemReader(reader).ReadObject();

Can you add some info about what kind of value is expected for SigningKey?

After diving into the RSA signature and the PemReader.ReadObject implementation from Org.BouncyCastle.OpenSsl, I thought it should be set to the file content of the .pem file for private key. Though, it still doesn't work.

Just to give you a clearer idea about which private key I used, hereby more info about my case..
The jira_privatekey.pem is the file I generated by running the openssl commands as described on this page from JIRA tutorials. Namely following lines:

openssl genrsa -out jira_privatekey.pem 1024
openssl req -newkey rsa:1024 -x509 -key jira_privatekey.pem -out jira_publickey.cer -days 365
openssl pkcs8 -topk8 -nocrypt -in jira_privatekey.pem -out jira_privatekey.pcks8
openssl x509 -pubkey -noout -in jira_publickey.cer  > jira_publickey.pem

Would be great if there is more info on what is expected by SigningKey, for example in Readme. Given this library adds RSA implementation on top of TinyOauth1 library, I believe an example for RSA would be more significant anyway.

[nitzel]

Hi tukuya,

openssl genrsa -out jira_privatekey.pem 1024
openssl req -newkey rsa:1024 -x509 -key jira_privatekey.pem -out jira_publickey.cer -days 365
openssl x509 -pubkey -noout -in jira_publickey.cer  > jira_publickey.pem

I'm using jira_privatekey.pem with my version of SmallOAuth while the content of jira_publickey.pem is the public key that I set up on Jira.

NB: With Jira to get the browser to automatically tell you the access token I needed to do the following

• GetRequestTokenAsync sets oauth_callback='oob' which must stay like this for Jira.
• GetAuthorizationUrl(requestToken)+&oauth_callback=https://yourserver/api/oauth/verification

Yes, we should add examples here as Jira is really not making this easy. Do you know if there's a publicly accessible Jira instance one could test against? I'd like to avoid using my company ones for this.

[nitzel]

Have you asserted that _config.SigningKey equals your private key? I've had trouble when the linebreaks were stripped away.

[jekstrom]

This is how my Startup.cs looks for setting up SmallOauth:

using (var reader = File.OpenText("jira_privatekey.pem"))
{
    AuthenticationConfig config = new AuthenticationConfig();
    Configuration.GetSection("AuthenticationConfig").Bind(config); // Read from settings

    config.SmallOauthConfig.SigningKey = reader.ReadToEnd();

    services.AddSingleton<ISmallOauth>(sp => new SmallOauth(config.SmallOauthConfig));
}

Let me know if that helps.

Thanks both, I got it working.

Turns out the problem was the way I handled async methods. I was using another library called AsyncEx to run the async methods from console app which had the synchronous main method. BouncyCastle's PemReader doesn't work in that setup. I upgraded console app to .NET Core and made the main method async as well. Now everything works.

Hi tukuya,

openssl genrsa -out jira_privatekey.pem 1024
openssl req -newkey rsa:1024 -x509 -key jira_privatekey.pem -out jira_publickey.cer -days 365
openssl x509 -pubkey -noout -in jira_publickey.cer  > jira_publickey.pem

I'm using jira_privatekey.pem with my version of SmallOAuth while the content of jira_publickey.pem is the public key that I set up on Jira.

NB: With Jira to get the browser to automatically tell you the access token I needed to do the following

• GetRequestTokenAsync sets oauth_callback='oob' which must stay like this for Jira.
• GetAuthorizationUrl(requestToken)+&oauth_callback=https://yourserver/api/oauth/verification

Yes, we should add examples here as Jira is really not making this easy. Do you know if there's a publicly accessible Jira instance one could test against? I'd like to avoid using my company ones for this.

Hi nitzel,
I don't think JIRA has any publicly accessible instance for testing purposes. We can create an example app in which the developer should provide link to their JIRA instance and they need to create the application link on that instance application settings as well.