This repository was archived by the owner on Apr 26, 2024. It is now read-only.
This repository was archived by the owner on Apr 26, 2024. It is now read-only.
Reverse proxy causes "Invalid signature for server ..." resulting in inability to accept invites #3294
Description
Description
I am unable to invite people on some servers into a chat.
In Riot I see no difference (but no one ever accepts the invite ;) )
Synapse always logs something similiar to this:
May 25 11:37:58 m00 synapse[1030]: signedjson.sign: [GET-123405] Error verifying signature
Traceback (most recent call last):
File "/nix/store/0b3bjqyx1lgks8ja23g1whw9mwjfc5sn-python2.7-signedjson-1.0.0/lib/python2.7/site-packages/signedjson/sign.py", line 121, in verify_signed_json
verify_key.verify(message, signature)
File "/nix/store/fv5ps1k1gcak9abndxm5skdqgqrzk3bp-python2.7-pynacl-1.2.1/lib/python2.7/site-packages/nacl/signing.py", line 114, in verify
return nacl.bindings.crypto_sign_open(smessage, self._key)
File "/nix/store/fv5ps1k1gcak9abndxm5skdqgqrzk3bp-python2.7-pynacl-1.2.1/lib/python2.7/site-packages/nacl/bindings/crypto_sign.py", line 109, in crypto_sign_open
raise exc.BadSignatureError("Signature was forged or corrupt")
BadSignatureError: Signature was forged or corrupt
May 25 11:37:58 m00 synapse[1030]: synapse.federation.transport.server: [GET-123405] authenticate_request failed
Traceback (most recent call last):
File "/nix/store/z8772byjm0gqh05rrs2084zsnjj40fic-matrix-synapse-0.28.1/lib/python2.7/site-packages/synapse/federation/transport/server.py", line 182, in new_func
origin = yield authenticator.authenticate_request(request, content)
SynapseError: 401: Invalid signature for server asra.gr with key ed25519:a_uGgJ
The remote side receives the invite but is unable to accept it ("unauthorized").
Federation tester did not show any issues at the time of the error for both involved servers:
https://matrix.org/federationtester/api/report?server_name=utzutzutz.net
https://matrix.org/federationtester/api/report?server_name=asra.gr
Several synapse operators seem to have the same issue. It does not seem to be related to OS or installation method.
See https://matrix.to/#/!HsxjoYRFsDtWBgDQPh:matrix.org/$1527262498154duwWE:fws.fr for some more examples.
Steps to reproduce
- have account on affected homeserver
- Invite user from different homeserver
Version information
- Homeserver: utzutzutz.net (+ others, see link above)
If not matrix.org:
- Version: 0.30.0
- Install method: NixOS module
- Platform: NixOS 18.03, VM, nginx reverse proxy in front of synapse