License Module, invalid signature

[Blesta Addons]

i'm playing with the license module , when i want to validate the license i always get the status unknown , after so much search and debug, i found the validation is logging the key exchange in the log, but the in my plugin i get a null response for the requestKey() .

so the communication is done, but the license_manager is not returned the response because a verifySignature eoor or invalid .

where i should look to resolve this error .

NOTE; i have a old license module that i haven't the time to test it before , the module was dated 2014-09-26 . is this version is not compatible with the v4-b3 ?

 

[timnboys]

  On 11/15/2016 at 11:46 PM, Blesta Addons said:

i'm playing with the license module , when i want to validate the license i always get the status unknown , after so much search and debug, i found the validation is logging the key exchange in the log, but the in my plugin i get a null response for the requestKey() .

so the communication is done, but the license_manager is not returned the response because a verifySignature eoor or invalid .

where i should look to resolve this error .

 

Expand  

I got it working but I rewrote the majority of the system to get it to work though as it is being used internally only 

[Blesta Addons]

  On 11/16/2016 at 12:56 AM, timnboys said:

I got it working but I rewrote the majority of the system to get it to work though as it is being used internally only 

Expand  

i have also my own license system, but i client want to module to be licensed via license module (blesta) , he want to test the result before he pay the license module .

i can't give him the license module files because it was delivered to me just for test purpose , so i need to verify the working final code before i give him the files without the license module/plugin files .

[timnboys]

  On 11/16/2016 at 1:04 AM, Blesta Addons said:

i have also my own license system, but i client want to module to be licensed via license module (blesta) , he want to test the result before he pay the license module .

i can't give him the license module files because it was delivered to me just for test purpose , so i need to verify the working final code before i give him the files without the license module/plugin files .

Expand  

ah okay so the module you are trying to license is a license module itself?

not exactly sure why you are trying to license a license module?

because if I understand correctly you are saying you are trying to license a license module with blesta's license module?

[Blesta Addons]

  On 11/16/2016 at 2:43 AM, timnboys said:

ah okay so the module you are trying to license is a license module itself?

not exactly sure why you are trying to license a license module?

because if I understand correctly you are saying you are trying to license a license module with blesta's license module?

Expand  

no,

my client was to re-sell his module , and want to use the license module of blesta to offer licenses .... for this he need now either purshase the license module addon or ask blesta team to offer him a trial module license .

i have a old license module but i can't offer him the files neither try to make a fix for files . for that i have asked a help from blesta team about this . is this related to the old files or to something else .

 

 

[Paul]

Have you tried license_manager-2016-08-02.zip? I don't see any reason it wouldn't work with 4.0

[Blesta Addons]

  On 11/16/2016 at 9:34 PM, Paul said:

Have you tried license_manager-2016-08-02.zip? I don't see any reason it wouldn't work with 4.0

Expand  

no i don't have any access to the license manager , i have requested the module for test purpose , and from that date i have not used it or tested it again .

[Paul]

  On 11/16/2016 at 9:37 PM, Blesta Addons said:

no i don't have any access to the license manager , i have requested the module for test purpose , and from that date i have not used it or tested it again .

Expand  

It probably won't make a difference. If there's an invalid signature, that would explain the null response. Might be something wrong with your implementation.

[Blesta Addons]

i used the same example file in the dist folder .... and the same result ... the license server return the output of public_key but the remote script always fail to get the signature verify .

is there sothing i need to check specially ?

 

 

[Paul]

  On 11/16/2016 at 9:43 PM, Blesta Addons said:

i used the same example file in the dist folder .... and the same result ... the license server return the output of public_key but the remote script always fail to get the signature verify .

is there sothing i need to check specially ?

 

 

Expand  

To be sure it's not an issue with v4 beta 3, would you be willing to test it on 3.6.2?

[Blesta Addons]

i will prepare a test server with 3.6.2 and i will check again .

[Blesta Addons]

Interesting .... when i have installed the module in v3.6.2 and setup a test services, i call the license manager and i get a valid status ....

so this is related to v4 b3 .

[Blesta Addons]

i found also the php version is not the same in two installation .... i will investigate more when i get more time ...

[Paul]

We upgraded phpseclib in v4, and I believe the license manager module ships with an older version of phpseclib. Do you think it's possible this is the source of the issue?

[Blesta Addons]

  On 11/16/2016 at 10:40 PM, Paul said:

We upgraded phpseclib in v4, and I believe the license manager module ships with an older version of phpseclib. Do you think it's possible this is the source of the issue?

Expand  

I will try to update the library and i will check again tomorrow .

 

[Blesta Addons]

i have found the error , it was the php debugger . the signature is not equal to the verification because the response has a amore data for debugging

string(44) "r6VDlsU0Q9MMQglGOSMIfXJ3gIKb7GKCcv9focIsI2Y=" 

string(3659) "r6VDlsU0Q9MMQglGOSMIfXJ3gIKb7GKCcv9focIsI2Y=

    148.9 ms
    ×

"

so i can confirm after disabling the php debugger in my test server i was able to use the license manager even if the older version .

Finnaly when we need to make a call request we need to disable any debugging system in the php as it return extra data in the response .

 

[Paul]

  On 11/22/2016 at 12:53 AM, Blesta Addons said:

i have found the error , it was the php debugger . the signature is not equal to the verification because the response has a amore data for debugging

string(44) "r6VDlsU0Q9MMQglGOSMIfXJ3gIKb7GKCcv9focIsI2Y=" 

string(3659) "r6VDlsU0Q9MMQglGOSMIfXJ3gIKb7GKCcv9focIsI2Y=

    148.9 ms
    ×

"

so i can confirm after disabling the php debugger in my test server i was able to use the license manager even if the older version .

Finnaly when we need to make a call request we need to disable any debugging system in the php as it return extra data in the response .

 

Expand  

Ah, that makes sense. That's a relief. What debugger are you using?

[Blesta Addons]

  On 11/22/2016 at 6:50 PM, Paul said:

Ah, that makes sense. That's a relief. What debugger are you using?

Expand  

Tracy .

 

[Paul]

  On 11/22/2016 at 11:23 PM, Blesta Addons said:

Tracy .

 

Expand  

Oh yeah! Does the debugger work on v4?

[Blesta Addons]

  On 11/23/2016 at 1:10 AM, Paul said:

Oh yeah! Does the debugger work on v4?

Expand  

100% .... i can't live without it now .

[Paul]

When I enabled the debugger and access something that normally loads fine, it returns in the red part at the top:

RuntimeException

Logging directory not found or is not absolute path.

Is there suppose to be a directory that's writable for this to work properly?

[Blesta Addons]

  On 12/1/2016 at 11:26 PM, Paul said:

When I enabled the debugger and access something that normally loads fine, it returns in the red part at the top:

RuntimeException

Logging directory not found or is not absolute path.

Is there suppose to be a directory that's writable for this to work properly?

Expand  

Yes , plugins/debugger/log should have writing permission .

maybe i need to add in the install a directory permission check before installing .

[Paul]

  On 12/1/2016 at 11:35 PM, Blesta Addons said:

Yes , plugins/debugger/log should have writing permission .

maybe i need to add in the install a directory permission check before installing .

Expand  

That solved it, thanks! I had to create the "log" directory as well. Probably a good idea to do a permission check, because it makes the system unoperable.

[Blesta Addons]

yes .. i will do it ... normally the log file should be with the plugin files, or i have missed it in packaging the files .

anyway i have updated the plugin for the check permission and i will update the package as soon as possible .

we will waiting your feedback about the debugging plugin

 

[Paul]

  On 12/1/2016 at 11:51 PM, Blesta Addons said:

yes .. i will do it ... normally the log file should be with the plugin files, or i have missed it in packaging the files .

anyway i have updated the plugin for the check permission and i will update the package as soon as possible .

we will waiting your feedback about the debugging plugin

 

Expand  

Your debugging plugin is helping me out quite a bit with PHP 7 testing.