CAcert Code Development list.

[Bernhard Fröhlich <bernhard AT cacert.org>]

Hi Frederic,

I verified that your problem is caused by the non-ascii character in 
your password. I modified the password of your test account 
"f.dumas AT siteparc.fr" to "1haslo!", then I was able to log in to the 
testmgr and verify the account. So you now can use these credentials to 
log in to the testserver.

You can now use the testmgr to get your account assured and Org Assurer, 
or I can prepare this for you.

Concerning the cause of the problem, my current guess is that testserver 
and testmgr use different encoding for the login form-data (testserver 
uses no explicit encoding, testmgr asks for 
"application/x-www-form-urlencoded"), so the testmgr ends up with a 
different hash if non-ASCII characters (or maybe even "dangerous" ASCII 
characters like +, % and /) are involved... I'm trying to pin this down, 
but consider this as a non priority issue.

Kind regards
Ted
;)


Am 29.07.2019 um 08:04 schrieb Frederic Dumas:
> Thank you Bernhard for the comprehensive explanations.
>
> > indeed, the testserver does not send out mails normally. All mails 
> > are redirected to a local mailbox, and you can access the mails 
> > relating to one account by logging in to the testmgr machine
>
> I better understand what is the course of actions in order to activate 
> a new account on the test server, and latter set flags to that 
> account. I have now read the related Wiki page too, thanks to the link 
> you gave. May we add that link on the test server landing page itself? 
> Would be helpful for the next new tester applicant.
>
> However, it would have failed to be funny, should it have worked as 
> expected.
>
> After (re)registering one then two accounts at <test.cacert.org>, I 
> could not login to <https://mgr.test.cacert.org:14843> either. The 
> testmgr application claims that my ID doesn't exist. At least this is 
> what I understood from the error message returned.
>
> I attach the related screenshots to the mail, including the chosen 
> password.
>
> > I myself cannot easily confirm your account without knowing your 
> > password. It would be possible if absolutely necessary, but it's much 
> > less work if you do it yourself.
>
> I guess I am on my way to do it by myself. May you help me understand 
> what is wrong with my attempts to login to the testmgr server?
>
> Regards.
>
> Frédéric.
>
> --
> Frédéric Dumas
> f.dumas AT ellis.siteparc.fr

Attachment: smime.p7s
Description: S/MIME Cryptographic Signature