Url signing using AmazonCloudFrontUrlSigner

[catalingeorgecristea]

Hello,

We are trying to sign urls using AmazonCloudFrontUrlSigner from latest version of AWSSDK.CloudFront package.
The AWS configuration and the keys seems to be setup correctly. We had a call with AWS support and they confirmed that the setup is correct and they advice us to post a question here.

The code used to sign url is :

string baseUrl = "ourdomain.com";
string fileName = "filename.csv";
string cloudFrontKeyPairID = "XXXXXXXXXX";
var url = "";

using (StreamReader privateKey = new StreamReader(@"C:\repos\UrlSingning\UrlSingning\private_key.pem"))
{
url = AmazonCloudFrontUrlSigner.GetCannedSignedURL(
AmazonCloudFrontUrlSigner.Protocol.https,
baseUrl,
privateKey,
fileName,
cloudFrontKeyPairID,
DateTime.Now.AddDays(2));
}

We are getting the below exception :

System.Exception
HResult=0x80131500
Message=Unknown primitive tag
Source=AWSSDK.Core
StackTrace:
at ThirdParty.BouncyCastle.Asn1.Asn1InputStream.CreatePrimitiveDerObject(Int32 tagNo, Byte[] bytes) in D:\JenkinsWorkspaces\trebuchet-stage-release\AWSDotNetPublic\sdk\src\Core\ThirdParty\BouncyCastle\Asn1\Asn1InputStream.cs:line 258

Any idea about what we are doing wrong is very appreciated.

Thank you.

[ashishdhingra]

@catalingeorgecristea I'm unsure of the root cause of the issue, the article https://stackoverflow.com/questions/45928250/unknown-tag-encountered-parsing-attributecertificate-from-der-file-with-bouncyca points to the certificate issue. AWS SDK for .NET has unit test around AmazonCloudFrontUrlSigner

aws-sdk-net/sdk/test/NetStandard/UnitTests/Services/CloudFrontUnitTests.cs

Line 19 in 0b903cf

public void SignURLValidation()

and it would have failed if there was any issue.

Were you able to resolve the issue?

[catalingeorgecristea]

hello,

@ashishdhingra thank you for your reply, the issue is still present.

I did not manage to find yet a solution, but still digging. The pem file is generated by our AWS admins using open SSL and i will pass your suggestion to them.

Thank you,
Catalin

[github-actions[bot]]

Hello! Reopening this discussion to make it searchable.