Hi rodney, I think the official word, is that there isn't a definitive location for certificate files (despite the spec recommending it). For instance, this article: http://code.google.com/p/opensocial-resources/wiki/OrkutValidatingSignedRequests, notes that the certificate location is purposely hidden to dissuade repeated downloads from clients. The last I'd heard, iGoogle was actually using the same certificate file as orkut, so the one in that article is probably correct. However, this was before we announced any OAuth proxy support, so the key you've discovered may in fact be the correct one.
In either case, to test your implementation it's probably easiest to debug on orkut, then try your code validating requests from iGoogle. First use the orkut certificate, and if that doesn't work, try the one you found. If that still doesn't work, let me know and I'll investigate. Thanks, Dan On Sep 17, 10:01 pm, rodney <[EMAIL PROTECTED]> wrote: > Where would the "definitive" location for the certificate used when > signing is used to authorize a gadgets.io.makeRequest call from > iGoogle? > > As per the Gadgets API reference, > athttp://code.google.com/apis/opensocial/docs/0.8/reference/gadgets/#ga..., > it should be located athttp://google.com/opensocial/certificates/... > though it's not working at present. > > There's a certificate referenced > here:https://sites.google.com/site/oauthgoog/oauth-proxy > > -----BEGIN CERTIFICATE----- > MIICDzCCAXigAwIBAgIJAK4EbDB8Vz3kMA0GCSqGSIb3DQEBBQUAMBAxDjAMBgNV > BAMTBW9ya3V0MB4XDTA4MDQyNDE2NTU0NloXDTExMDExOTE2NTU0NlowEDEOMAwG > A1UEAxMFb3JrdXQwgZ8wDQYJKoZIhvcNAQEBBQADgY0AMIGJAoGBANw7NrXUteUP > ODxt+VDmUq01X2jzMYFofY2mc6AOddR9LKoadfn+2zhqMEoPno/h4/a8cZkPUjTv > Wi17rD17E69ZuPMzbysz0FAjeMaYUbc4tudNE8/QgsM24h6D4VDtKA4VcG8RHaxS > NoMN3P5I92Mzs5jVb/6GmAeGN7kRpUDhAgMBAAGjcTBvMB0GA1UdDgQWBBRfKFH0 > 1VbaxYc0GTuyvKk62+yx/TBABgNVHSMEOTA3gBRfKFH01VbaxYc0GTuyvKk62+yx > /aEUpBIwEDEOMAwGA1UEAxMFb3JrdXSCCQCuBGwwfFc95DAMBgNVHRMEBTADAQH/ > MA0GCSqGSIb3DQEBBQUAA4GBABRLPFsM/etH7pQpez80LGNETfciOFpD3Uk6DdRE > GRiBpVC7eReb7O8BjyV7VNaGveqNSBI/XMfKORjzG3XsSq5e30H0VwRK7TNXgIc9 > dTgWMqNiXTYxIjtmo5TogvFmspX56CBXbuJH/oeKYBM4oDWBMX6h0Su6CucAG0aC > xDB+ > -----END CERTIFICATE----- > > Thanks. --~--~---------~--~----~------------~-------~--~----~ You received this message because you are subscribed to the Google Groups "iGoogle Developer Forum" group. To post to this group, send email to [email protected] To unsubscribe from this group, send email to [EMAIL PROTECTED] For more options, visit this group at http://groups.google.com/group/Google-Gadgets-API?hl=en -~----------~----~----~----~------~----~------~--~---
