Level up your Box knowledge with brand new learning paths on Box University. Visit training.box.com to get started

Box Status

JWT authentication problem, "PEM_read_bio:no start line"

Answered
Follow
New post
Box Product Support

Hi,

 

I am trying to authenticate to Box using JWT authentication method. The private/public keys are generated according to the instruction in the Box documentation and the public key is uploaded.

 

The JWT that I am using is verified using http://jwt.io with the same public key as uploaded to Box. However, after sending to Box I get the following error:

 

OpenSSL unable to verify data: error:0906D06C:PEM routines:PEM_read_bio:no start line

I cannot find any information about this error. Does anybody know what does it mean?

 

The header and claim part of the JWT are probably correct; it seems that the parsing of header and claim happens before verifying signed data (I have been receiving and fixing header/claim data).

 

The public/private key pair is generated using OpenSSL on Linux.

 

 

0

Comments

3 comments

Date Votes
  • Box Product Support

    I have found a problem, I was using Base64 instead of Base64URL encoding. Some servers are able to verify assertion regardless of the type of the encoding, Box apparently cannot.

     

    It is written in the documentation that Base64URL encoding should be used, but maybe a note should be present about unsupported Base64 encoding, as some frameworks use this encoding as default (at least the one I am using).

     

    0
    Comment actions Permalink
  • Box Product Support

    I'm having the same issue "error":"invalid_grant","error_description":"OpenSSL unable to verify data"

     

    But I'm using the Python SDK and I'm sure it's using Base64URL encoding, Do you have any other ideas that could help to solve this issue?

    0
    Comment actions Permalink
  • ghm101

    I have this problem aslo - 

    0
    Comment actions Permalink

Please sign in to leave a comment.