solid: databox cert recovery doesn't work for me

I’m not sure where this goes, as I couldn’t find a separate bug tracker for databox, but Andrei asked me to open an issue here so here it is.

I can’t seem to generate WebID certs using databox. The issues I ran into and my suggested solutions where appropriate are:

  • Trying to recover my key by pressing “Issue” on https://andrewmoise.databox.me/,system/newCert (in the course of recovering my credentials through the email recovery link) doesn’t seem to do anything. That was because <keygen> was disabled in Chrome, but nothing either in the docs or on databox indicated I would need to enable it. The change request would be to describe in the docs the necessity of enabling <keygen>, and also indicate it on that page on databox.
  • Once I enable <keygen> in Chrome’s settings, then enter into the boxes “Andrew Moise” for name, and “https://andrewmoise.databox.me/” for WebID, I get bounced to https://andrewmoise.databox.me/,system/newCert which tells me “Access denied for: https://andrewmoise.databox.me/”. The change request would be to indicate in the databox UI that I need to enter “andrewmoise.databox.me” in the box instead of “https://andrewmoise.databox.me/”, or else accept both.
  • Once I fix the value I enter in the box to “andrewmoise.databox.me”, it does generate a certificate and prompt me to download it. It’s awkward to download and then import the cert, but I guess browser UI isn’t your problem. Anyway I import the cert to my browser, successfully as far as I can tell. Then I go to https://andrewmoise.databox.me/, the browser asks me which certificate to use to identify myself, I select the appropriate certificate (progress!), and then I see “403 - oh noes, access denied! Please visit the recovery page in case you have lost access to your credentials.” Which is the same as if I have no certificate. I’m not sure what to recommend as the solution since I have no idea how to solve this. I could successfully log in to that location when I first created the account (since I still had the cookie), but once I’ve lost the cookie I have no idea how to recover it or use my WebID credentials to log in to anything else. So I guess this is semi a help request and semi an issue request to add docs as to how to do this thing I’m trying to do.

Thanks in advance for your help.

About this issue

  • Original URL
  • State: open
  • Created 8 years ago
  • Reactions: 1
  • Comments: 30 (22 by maintainers)

Most upvoted comments

@renoirb nice, yeah! The system we’re switching to uses the same workflow as Portier (uses OpenID Connect tokens, has various pluggable authentication strategies, etc). I wonder if we can work with them to inter-operate.