Error code-527

[swa...@bioenabletech.com]

Hello Team,

why we are getting error  “527” – Invalid “mc” code under Meta tag.",Please help.

[panping...@gmail.com]

We get 527 error code also,and get 931 yesterday use the same cer file. Certificate is not expired.

I need your help.

在 2017年5月8日星期一 UTC+5:30下午3:11:16，swa...@bioenabletech.com写道：

[Royston Mascarenhas]

Hi.. we are getting 527 too.. were any of you able to resolve it?

 

what exactly is the issue? with the certificate or on the server side?

 

regards,

 

 

Royston Mascarenhas

Mobile: +91 9820 554068 | Office: +91 2847 8472 | Skype: roystonrm

www.secugen.com

--
You received this message because you are subscribed to the Google Groups "Aadhaar Registered Devices Discussion Group" group.
To unsubscribe from this group and stop receiving emails from it, send an email to aadhaar_rd+...@googlegroups.com.
To post to this group, send email to aadha...@googlegroups.com.
Visit this group at https://groups.google.com/group/aadhaar_rd.
To view this discussion on the web visit https://groups.google.com/d/msgid/aadhaar_rd/6b3fbc84-2c5e-4346-98c3-c758f33511d4%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[Sanjith Sundaram]

Good to see that issue is resovled for Secugen.

For faster resolutions on such issues faced in PoC env please write to Adi Narayana looping Suraj and uidai team.

Regards,
Sanjith Sundaram

Sent from mobile. Please excuse typos.

On May 10, 2017 11:49 AM, "Royston Mascarenhas" <roy...@secugenindia.com> wrote:

Hi.. we are getting 527 too.. were any of you able to resolve it?

 

what exactly is the issue? with the certificate or on the server side?

 

regards,

 

 

Royston Mascarenhas

Mobile: +91 9820 554068 | Office: +91 2847 8472 | Skype: roystonrm

www.secugen.com

 

From: aadha...@googlegroups.com [mailto:aadhaar_rd@googlegroups.com] On Behalf Of panping...@gmail.com
Sent: Monday, May 8, 2017 6:15 PM
To: Aadhaar Registered Devices Discussion Group
Subject: [aadhaar_rd] Re: Error code-527

 

We get 527 error code also,and get 931 yesterday use the same cer file. Certificate is not expired.

I need your help.

在 2017年5月8日星期一 UTC+5:30下午3:11:16，swa...@bioenabletech.com写道：

Hello Team,

why we are getting error  “527” – Invalid “mc” code under Meta tag.",Please help.

--
You received this message because you are subscribed to the Google Groups "Aadhaar Registered Devices Discussion Group" group.

To unsubscribe from this group and stop receiving emails from it, send an email to aadhaar_rd+unsubscribe@googlegroups.com.

To post to this group, send email to aadha...@googlegroups.com.
Visit this group at https://groups.google.com/group/aadhaar_rd.
To view this discussion on the web visit https://groups.google.com/d/msgid/aadhaar_rd/6b3fbc84-2c5e-4346-98c3-c758f33511d4%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

--

You received this message because you are subscribed to the Google Groups "Aadhaar Registered Devices Discussion Group" group.

To unsubscribe from this group and stop receiving emails from it, send an email to aadhaar_rd+unsubscribe@googlegroups.com.

To post to this group, send email to aadha...@googlegroups.com.
Visit this group at https://groups.google.com/group/aadhaar_rd.

To view this discussion on the web visit https://groups.google.com/d/msgid/aadhaar_rd/000f01d2c955%244d4bebb0%24e7e3c310%24%40com.

[sure...@iclimbsystems.com]

Hi , 

I don't see how Error code 527 resolved ..i see this info is missing in this thread . Can some one explain on this , We are hitting this issue as part of our validation . 

Any info on this will be great help. We are using  our Device provider certificate signed by UIDAI  . 

Wanted to understand issues is how mc is constructed at device side or issue on server side ?

with best regards,

Suresh

[Mahesh Patel]

Dear Suresh,

 

Below is the sample flow about your question:

 

 

Regards,
Mahesh Patel

Mantra Softech India Pvt Ltd
ISO 9001:2008 Certified Company

Network: AHMEDABAD–BANGALORE–HYDERABAD–CHENNAI-DELHI–PUNE–MUMBAI–JAIPUR

 

From: aadha...@googlegroups.com [mailto:aadha...@googlegroups.com] On Behalf Of sure...@iclimbsystems.com
Sent: Thursday, December 28, 2017 6:01 PM
To: Aadhaar Registered Devices Discussion Group <aadha...@googlegroups.com>
Subject: [aadhaar_rd] Re: Error code-527

 

Hi , 

--

You received this message because you are subscribed to the Google Groups "Aadhaar Registered Devices Discussion Group" group.

To unsubscribe from this group and stop receiving emails from it, send an email to aadhaar_rd+...@googlegroups.com.

To post to this group, send email to aadha...@googlegroups.com.
Visit this group at https://groups.google.com/group/aadhaar_rd.

To view this discussion on the web visit https://groups.google.com/d/msgid/aadhaar_rd/c7efb0fc-1046-487b-8593-4df881a81a9a%40googlegroups.com.

[sure...@iclimbsystems.com]

Dear Mahesh ,

Thanks a lot for the detailed illustration . along with  production environment as use case. At the moment we are not yet their. At the moment we are not on HSH...But used our own test Setup ..  As part of RD Service we did quick change as below .

- Put Cert file ( Our Device Provider file signed by UIDAI)  as part of our Android RD Service

- Used Android /Java APIs to extract key from Cert.  Key we got is Public key

- Generated  RSA Key pair using Android Crypto .

-  Tried to sign   Device Public key generated as part of Key pair in previous step using  Device provider key extracted from .cert file with SHA256withRSA as signing  protocol ..

  So if i see signing approach ,  In general signing needs to be done done using private key   but  here using Device provider key which is public. Wanted to understand this how this is done in Android context at your side.. It would be great if you could look in to above steps feedback .

with best regards,

Suresh

[sure...@iclimbsystems.com]

Thanks . Reported  Issue is resolved  now. 

with best regards,

Suresh

[Netaji Rao]

Hi Suresh,

Good to know that the issue is resolved. 

Can you please let us know the rootcause and debug info? This will help others who refer the group threads for similar issues in future.

Thanks,
Netaji Rao D

To unsubscribe from this group and stop receiving emails from it, send an email to aadhaar_rd+unsubscribe@googlegroups.com.

To post to this group, send email to aadha...@googlegroups.com.
Visit this group at https://groups.google.com/group/aadhaar_rd.

To view this discussion on the web visit https://groups.google.com/d/msgid/aadhaar_rd/0c22e7fb-a2b2-4ff2-98ba-9ce04298e5f2%40googlegroups.com.

[sure...@iclimbsystems.com]

Dear Netaji, 

You are right .. in the interest of future Developers overcome this issue  here is info on this topic . 

Issue was around two topics , By the  details here are for Android based device

# Step 1.  Signing Device Provider ( cert sent from Device provider and Signed by UIDAI) .  

 a) sign Above  device provider public key cert using  Device Provider Private key 

 b) Now use this as Device Provider key to sign Device Public key... All this needs to Out of band at Server side or equivalent. Make Sure  Chain of trust  is correct          by seeing final  signed key details 

 c) Check Point: Just to avoid conversion issues always push key to Android Key store and use standard Key store APIs to Sign or Verify

 

# Step 2: Most important Step  : Now post to step C , if you still hit error code #527, Don't debug at your side. it is clear indication of Certification specific  information  (  especially subject  details) not correct at your side or at  Device Registration Server Side. 

Suggestion  to UIDAI Team : To get more specific error  for  invalid MC ,  it is  good to add additional new error code  instead of invalid MC code ( Ex: subject information in MC is wrong as compared to Registration details at server side ) .  This will help in narrowing down the issue associated with Cert

After working out both above steps , we are successful in Auth solution. 

with best regards,

Suresh

[Netaji Rao]

Thanks Suresh for obliging.

Thanks,
Netaji Rao D

To unsubscribe from this group and stop receiving emails from it, send an email to aadhaar_rd+unsubscribe@googlegroups.com.

To post to this group, send email to aadha...@googlegroups.com.
Visit this group at https://groups.google.com/group/aadhaar_rd.

To view this discussion on the web visit https://groups.google.com/d/msgid/aadhaar_rd/c523b3b6-bb23-4882-a12a-068ebcffd53d%40googlegroups.com.