{"action":"opened","issue":{"url":"https://api.github.com/repos/aspnet/Security/issues/223","labels_url":"https://api.github.com/repos/aspnet/Security/issues/223/labels{/name}","comments_url":"https://api.github.com/repos/aspnet/Security/issues/223/comments","events_url":"https://api.github.com/repos/aspnet/Security/issues/223/events","html_url":"https://github.com/aspnet/Security/issues/223","id":69934362,"number":223,"title":"OpenId connect fails with SecurityTokenInvalidSignatureException on latest coreclr ","user":{"login":"Praburaj","id":2294732,"avatar_url":"https://avatars.githubusercontent.com/u/2294732?v=3","gravatar_id":"","url":"https://api.github.com/users/Praburaj","html_url":"https://github.com/Praburaj","followers_url":"https://api.github.com/users/Praburaj/followers","following_url":"https://api.github.com/users/Praburaj/following{/other_user}","gists_url":"https://api.github.com/users/Praburaj/gists{/gist_id}","starred_url":"https://api.github.com/users/Praburaj/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/Praburaj/subscriptions","organizations_url":"https://api.github.com/users/Praburaj/orgs","repos_url":"https://api.github.com/users/Praburaj/repos","events_url":"https://api.github.com/users/Praburaj/events{/privacy}","received_events_url":"https://api.github.com/users/Praburaj/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":0,"created_at":"2015-04-21T19:47:27Z","updated_at":"2015-04-21T19:47:27Z","closed_at":null,"body":"```\r\n[12:16:17][xunit-test]         <h1>An unhandled exception occurred while processing the request.</h1>\r\n[12:16:17][xunit-test]                 <div class=\"titleerror\">SecurityTokenInvalidSignatureException: IDX10503: Signature validation failed. Keys tried: &#x27;System.IdentityModel.Tokens.X509SecurityKey - (thumbprint) : 92B88C3DD981BF1EBCB244FCFA63C007706C79E0<br />\r\n[12:16:17][xunit-test] System.IdentityModel.Tokens.RsaSecurityKey<br />\r\n[12:16:17][xunit-test] System.IdentityModel.Tokens.X509SecurityKey - (thumbprint) : 3270BF5597004DF339A4E62224731B6BD82810A6<br />\r\n[12:16:17][xunit-test] System.IdentityModel.Tokens.RsaSecurityKey<br />\r\n[12:16:17][xunit-test] &#x27;.<br />\r\n[12:16:17][xunit-test] Exceptions caught:<br />\r\n[12:16:17][xunit-test]  &#x27;System.ArgumentNullException: Value cannot be null.<br />\r\n[12:16:17][xunit-test] Parameter name: SafeHandle cannot be null.<br />\r\n[12:16:17][xunit-test]    at System.StubHelpers.StubHelpers.SafeHandleAddRef(SafeHandle pHandle, Boolean&amp; success)<br />\r\n[12:16:17][xunit-test]    at Internal.NativeCrypto.CapiHelper.Interop.CryptCreateHash(SafeProvHandle hProv, Int32 algId, SafeKeyHandle hKey, CryptCreateHashFlags dwFlags, SafeHashHandle&amp; phHash)<br />\r\n[12:16:17][xunit-test]    at Internal.NativeCrypto.CapiHelper.CreateHashHandle(SafeProvHandle hProv, Byte[] hash, Int32 calgHash)<br />\r\n[12:16:17][xunit-test]    at Internal.NativeCrypto.CapiHelper.VerifySign(SafeProvHandle hProv, SafeKeyHandle hKey, Int32 calgKey, Int32 calgHash, Byte[] hash, Byte[] signature)<br />\r\n[12:16:17][xunit-test]    at System.Security.Cryptography.RSACryptoServiceProvider.VerifyData(Byte[] buffer, Object halg, Byte[] signature)<br />\r\n[12:16:17][xunit-test]    at System.IdentityModel.Tokens.RSACryptoServiceProviderProxy.VerifyData(Byte[] signingInput, Object hash, Byte[] signature)<br />\r\n[12:16:17][xunit-test]    at System.IdentityModel.Tokens.AsymmetricSignatureProvider.Verify(Byte[] input, Byte[] signature)<br />\r\n[12:16:17][xunit-test]    at System.IdentityModel.Tokens.JwtSecurityTokenHandler.ValidateSignature(Byte[] encodedBytes, Byte[] signature, SecurityKey key, String algorithm)<br />\r\n[12:16:17][xunit-test]    at System.IdentityModel.Tokens.JwtSecurityTokenHandler.ValidateSignature(String token, TokenValidationParameters validationParameters)<br />\r\n[12:16:17][xunit-test] System.ArgumentNullException: Value cannot be null.<br />\r\n[12:16:17][xunit-test] Parameter name: SafeHandle cannot be null.<br />\r\n[12:16:17][xunit-test]    at System.StubHelpers.StubHelpers.SafeHandleAddRef(SafeHandle pHandle, Boolean&amp; success)<br />\r\n[12:16:17][xunit-test]    at Internal.NativeCrypto.CapiHelper.Interop.CryptCreateHash(SafeProvHandle hProv, Int32 algId, SafeKeyHandle hKey, CryptCreateHashFlags dwFlags, SafeHashHandle&amp; phHash)<br />\r\n[12:16:17][xunit-test]    at Internal.NativeCrypto.CapiHelper.CreateHashHandle(SafeProvHandle hProv, Byte[] hash, Int32 calgHash)<br />\r\n[12:16:17][xunit-test]    at Internal.NativeCrypto.CapiHelper.VerifySign(SafeProvHandle hProv, SafeKeyHandle hKey, Int32 calgKey, Int32 calgHash, Byte[] hash, Byte[] signature)<br />\r\n[12:16:17][xunit-test]    at System.Security.Cryptography.RSACryptoServiceProvider.VerifyData(Byte[] buffer, Object halg, Byte[] signature)<br />\r\n[12:16:17][xunit-test]    at System.IdentityModel.Tokens.AsymmetricSignatureProvider.Verify(Byte[] input, Byte[] signature)<br />\r\n[12:16:17][xunit-test]    at System.IdentityModel.Tokens.JwtSecurityTokenHandler.ValidateSignature(Byte[] encodedBytes, Byte[] signature, SecurityKey key, String algorithm)<br />\r\n[12:16:17][xunit-test]    at System.IdentityModel.Tokens.JwtSecurityTokenHandler.ValidateSignature(String token, TokenValidationParameters validationParameters)<br />\r\n[12:16:17][xunit-test] System.ArgumentNullException: Value cannot be null.<br />\r\n[12:16:17][xunit-test] Parameter name: SafeHandle cannot be null.<br />\r\n[12:16:17][xunit-test]    at System.StubHelpers.StubHelpers.SafeHandleAddRef(SafeHandle pHandle, Boolean&amp; success)<br />\r\n[12:16:17][xunit-test]    at Internal.NativeCrypto.CapiHelper.Interop.CryptCreateHash(SafeProvHandle hProv, Int32 algId, SafeKeyHandle hKey, CryptCreateHashFlags dwFlags, SafeHashHandle&amp; phHash)<br />\r\n[12:16:17][xunit-test]    at Internal.NativeCrypto.CapiHelper.CreateHashHandle(SafeProvHandle hProv, Byte[] hash, Int32 calgHash)<br />\r\n[12:16:17][xunit-test]    at Internal.NativeCrypto.CapiHelper.VerifySign(SafeProvHandle hProv, SafeKeyHandle hKey, Int32 calgKey, Int32 calgHash, Byte[] hash, Byte[] signature)<br />\r\n[12:16:17][xunit-test]    at System.Security.Cryptography.RSACryptoServiceProvider.VerifyData(Byte[] buffer, Object halg, Byte[] signature)<br />\r\n[12:16:17][xunit-test]    at System.IdentityModel.Tokens.RSACryptoServiceProviderProxy.VerifyData(Byte[] signingInput, Object hash, Byte[] signature)<br />\r\n[12:16:17][xunit-test]    at System.IdentityModel.Tokens.AsymmetricSignatureProvider.Verify(Byte[] input, Byte[] signature)<br />\r\n[12:16:17][xunit-test]    at System.IdentityModel.Tokens.JwtSecurityTokenHandler.ValidateSignature(Byte[] encodedBytes, Byte[] signature, SecurityKey key, String algorithm)<br />\r\n[12:16:17][xunit-test]    at System.IdentityModel.Tokens.JwtSecurityTokenHandler.ValidateSignature(String token, TokenValidationParameters validationParameters)<br />\r\n[12:16:17][xunit-test] System.ArgumentNullException: Value cannot be null.<br />\r\n[12:16:17][xunit-test] Parameter name: SafeHandle cannot be null.<br />\r\n[12:16:17][xunit-test]    at System.StubHelpers.StubHelpers.SafeHandleAddRef(SafeHandle pHandle, Boolean&amp; success)<br />\r\n[12:16:17][xunit-test]    at Internal.NativeCrypto.CapiHelper.Interop.CryptCreateHash(SafeProvHandle hProv, Int32 algId, SafeKeyHandle hKey, CryptCreateHashFlags dwFlags, SafeHashHandle&amp; phHash)<br />\r\n[12:16:17][xunit-test]    at Internal.NativeCrypto.CapiHelper.CreateHashHandle(SafeProvHandle hProv, Byte[] hash, Int32 calgHash)<br />\r\n[12:16:17][xunit-test]    at Internal.NativeCrypto.CapiHelper.VerifySign(SafeProvHandle hProv, SafeKeyHandle hKey, Int32 calgKey, Int32 calgHash, Byte[] hash, Byte[] signature)<br />\r\n[12:16:17][xunit-test]    at System.Security.Cryptography.RSACryptoServiceProvider.VerifyData(Byte[] buffer, Object halg, Byte[] signature)<br />\r\n[12:16:17][xunit-test]    at System.IdentityModel.Tokens.AsymmetricSignatureProvider.Verify(Byte[] input, Byte[] signature)<br />\r\n[12:16:17][xunit-test]    at System.IdentityModel.Tokens.JwtSecurityTokenHandler.ValidateSignature(Byte[] encodedBytes, Byte[] signature, SecurityKey key, String algorithm)<br />\r\n[12:16:17][xunit-test]    at System.IdentityModel.Tokens.JwtSecurityTokenHandler.ValidateSignature(String token, TokenValidationParameters validationParameters)<br />\r\n[12:16:17][xunit-test] &#x27;.<br />\r\n[12:16:17][xunit-test] token: &#x27;{&quot;typ&quot;:&quot;JWT&quot;,&quot;alg&quot;:&quot;RS256&quot;,&quot;x5t&quot;:&quot;kriMPdmBvx68skT8-mPAB3BseeA&quot;}.{&quot;aud&quot;:&quot;c99497aa-3ee2-4707-b8a8-c33f51323fef&quot;,&quot;iss&quot;:&quot;https://sts.windows.net/4afbc689-805b-48cf-a24c-d4aa3248a248/&quot;,&quot;iat&quot;:1422395763,&quot;nbf&quot;:1422395763,&quot;exp&quot;:1422399663,&quot;ver&quot;:&quot;1.0&quot;,&quot;tid&quot;:&quot;4afbc689-805b-48cf-a24c-d4aa3248a248&quot;,&quot;amr&quot;:[&quot;pwd&quot;],&quot;oid&quot;:&quot;f876abeb-d6b5-44e4-9716-6266ac0181a8&quot;,&quot;upn&quot;:&quot;user3@testgmail.onmicrosoft.com&quot;,&quot;sub&quot;:&quot;PUdhclP5PgIjSU9P1S-HelDaSFSf-mXV1Y60-K2vWqw&quot;,&quot;given_name&quot;:&quot;User3&quot;,&quot;family_name&quot;:&quot;User3&quot;,&quot;name&quot;:&quot;User3&quot;,&quot;unique_name&quot;:&quot;user3@testgmail.onmicrosoft.com&quot;,&quot;nonce&quot;:&quot;635579928639517715.OTRjOTVkM2EtMDRmYS00ZDE3LThhZGUtZWZmZGM4ODkzZGZkMDRlNDhkN2MtOWIwMC00ZmVkLWI5MTItMTUwYmQ4MzdmOWI0&quot;,&quot;c_hash&quot;:&quot;FGt3wcQADe0PY1Qx7O1r6g&quot;,&quot;pwd_exp&quot;:&quot;6693280&quot;,&quot;pwd_url&quot;:&quot;https://portal.microsoftonline.com/ChangePassword.aspx&quot;}&#x27;</div>\r\n[12:16:17][xunit-test]                     <p class=\"location\">Microsoft.IdentityModel.Logging.LogHelper.LogError(String message, Type exceptionType, Boolean throwException)</p>\r\n\r\n```"}}