problem using EAUT

[Yogesh]

Hi All,
I want the ability to have my website users type their email IDs which
I can convert into OpenID URLs. And hence I've been trying to use EAUT
for my work. But it doesn't work for me and these are the problems I
am facing.

When I do the needful to convert email to URL, I get the following
message:
Got no response code when fetching
https://www.google.com/accounts/ServiceLogin?service=mail&passive=true&rm=false&continue=http%3A%2F%2Fmail.google.com%2Fmail%2F%3Fui%3Dhtml%26zy%3Dl&bsv=zpwhtygjntrz&scc=1&ltmpl=default&ltmplcache=2
[04-Nov-2009 10:00:05] CURL error (60): SSL certificate problem,
verify that the CA cert is OK. Details:
error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate
verify failed


Someone suggested to me that I should call curl_setopt($c,
CURLOPT_SSL_VERIFYPEER, false); to avert this. Indeed the error
messages above disappeared.

Successfully fetched 'https://www.google.com/accounts/ServiceLogin?
service=mail&passive=true&rm=false&continue=http%3A%2F
%2Fmail.google.com%2Fmail%2F%3Fui%3Dhtml%26zy
%3Dl&bsv=zpwhtygjntrz&scc=1&ltmpl=default&ltmplcache=2': GET response
code 200

But thereafter, I don't get a XRDS from Google in the function
Auth_Yadis_Email_getServices(). The function Auth_Yadis_Yadis::discover
($uri, $fetcher, 0); instead of returning the XRDS document actually
returns the HTML of the Gmail front-page. I am quoting the function
below for everyone's reference. Can you please tell me what wrong am I
doing here. Doest the fact that call curl_setopt($c,
CURLOPT_SSL_VERIFYPEER, false); causing GMail to not return the XRDS
document? Why am I getting $xrds as Null in the following get? What
can I do to get it fixed real quick?


function Auth_Yadis_Email_getServices($uri, $fetcher) {
$uri = Auth_OpenID::normalizeUrl($uri);

$response = Auth_Yadis_Yadis::discover($uri, $fetcher, 0);
if ($response->isXRDS()) {
$xrds =& Auth_Yadis_XRDS::parseXRDS($response->response_text);
if ($xrds) {
return $xrds->services(array
('filter_MatchesAnyEmailType'));
}
else
echo "NOXRDS";
}
}

thanks
-y

[Will Norris]

That's because Google never implemented EAUT... almost no one did.
EAUT is effectively being replaced by a much better method of doing
this called webfinger[0]. I addresses the same use case as EUAT
(getting a descriptor document for an email address) but does it
without the URL transformation step, which was always a little goofy
anyway. Both Yahoo and Google have early implementations of webfinger
live right now.

[0]: http://webfinger.net/

-will