JWT with Python SDK giving "Could not unserialize key data."

I am using Python 3.5. Here is my code,which is straight out of the docs, followed by the error.

from boxsdk import JWTAuth

auth = JWTAuth(

client_id='k29xaarbpae4znkghpay6rsixiitg1xc',

client_secret='AajZ60HOdKhsuX0PRe0mkv5agV1J61sf',

enterprise_id='XXXXXXX',

jwt_key_id='XXXXX',

rsa_private_key_file_sys_path='C:\\Users\\H470722\\Documents\\Keys\\private_key.pem',

rsa_private_key_passphrase='XXXXXXX',

store_tokens=lambda x, y: None,

)

access_token = auth.authenticate_instance()

Error:

>>>

RESTART: C:/Users/H470722/Documents/EIV Reporting ETL/Python Scripts/BoxTest.py

From cffi callback :

Traceback (most recent call last):

File "C:\Users\H470722\AppData\Roaming\Python\Python35\site-packages\cryptography\hazmat\backends\openssl\backend.py", line 101, in _pem_password_cb

pw_buf[:len(ud.password)] = ud.password

TypeError: a bytes-like object is required, not 'str'

Traceback (most recent call last):

File "C:/Users/H470722/Documents/EIV Reporting ETL/Python Scripts/BoxTest.py", line 10, in

store_tokens=lambda x, y: None,

File "C:\Users\H470722\AppData\Roaming\Python\Python35\site-packages\boxsdk\auth\jwt_auth.py", line 102, in __init__

backend=default_backend(),

File "C:\Users\H470722\AppData\Roaming\Python\Python35\site-packages\cryptography\hazmat\primitives\serialization.py", line 20, in load_pem_private_key

return backend.load_pem_private_key(data, password)

File "C:\Users\H470722\AppData\Roaming\Python\Python35\site-packages\cryptography\hazmat\backends\multibackend.py", line 305, in load_pem_private_key

return b.load_pem_private_key(data, password)

File "C:\Users\H470722\AppData\Roaming\Python\Python35\site-packages\cryptography\hazmat\backends\openssl\backend.py", line 1084, in load_pem_private_key

password,

File "C:\Users\H470722\AppData\Roaming\Python\Python35\site-packages\cryptography\hazmat\backends\openssl\backend.py", line 1253, in _load_key

self._handle_key_loading_error()

File "C:\Users\H470722\AppData\Roaming\Python\Python35\site-packages\cryptography\hazmat\backends\openssl\backend.py", line 1325, in _handle_key_loading_error

raise ValueError("Could not unserialize key data.")

ValueError: Could not unserialize key data.

What am I doing wrong?

with open(rsa_private_key_file_sys_path) as key_file:
self._rsa_private_key = serialization.load_pem_private_key(
key_file.read(),
password=rsa_private_key_passphrase,
backend=default_backend(),
)

with open(rsa_private_key_file_sys_path) as key_file:
self._rsa_private_key = serialization.load_pem_private_key(
bytes(key_file.read()),
password=rsa_private_key_passphrase,
backend=default_backend(),
)

uberscout

January 11, 2017 13:52

I'm also running into this same issue.

Murtza

January 11, 2017 14:35

I am not sure why you are seeing this error, but according to this thread it might be an issue with the format of the private key you are using.

January 11, 2017 15:08

I was looking at the Box SDK and it looks like it's in the JWTAuth object (jwt_auth.py) specifically:

```

key_file.read() is passing it a string and it expects a bytes array (https://cryptography.io/en/latest/hazmat/primitives/asymmetric/serialization/#cryptography.hazmat.primitives.serialization.load_pem_private_key)

I am just manually writing my JWT Auth but I believe the key_file.read() should be wrapped with bytes.

January 11, 2017 15:13

Looks like this was fixed in an update. You should be able to do this now.

DanEhrlich

June 21, 2017 12:10

How do I fix this in Python 2.7?

boobalganesan

January 26, 2018 11:49

Which version was it fixed in? I am using 3.6 and still facing the issue.

DimitrisT

February 01, 2018 11:16

Same here...

Anyone have had success?

February 01, 2018 14:17

I was not decrypting my private key -- duh!

SS90

March 14, 2018 07:48

I don't know if this will help now or not but, you need to ensure that rsa_private_key_passphrase is in bytes and not string.

So instead of -

use -

rsa_private_key_passphrase=b'XXXXXXX', (for bytes)

z07diac

September 19, 2018 15:38

Did you solve this problem?

Comments