2011-04-08 28 views
1

我已经尝试了一切,但Amazon Load Balancer API不会接受我的签名。AWS API - 不会接受我的签名

无论我尝试什么,我都会得到一个“403 SignatureDoesNotMatch”响应。我可能错过了一些显而易见的东西,但花了好几个小时的时间试图弄清楚那是什么,我正处在我的束缚之中。请帮忙!!谢谢。

这里是我的代码:

Public Sub DeregisterInstanceFromLoadBalance(ByVal strServerID As String) 
    Dim strURL As String 
    strURL = "http://elasticloadbalancing.amazonaws.com/?" 
    Dim strTimestamp As String = PercentEncodeRfc3986(DateTime.UtcNow.ToString("yyyy-MM-dd'T'HH:mm:ss'Z'")) 

    Dim strParams As String 
    strParams = "AWSAccessKeyId=<MY_API_KEY>" & _ 
    "&Action=DeregisterInstancesFromLoadBalancer" & _ 
    "&Instances.member.N=" & strServerID & _ 
    "&LoadBalancerName=ATTB" & _ 
    "&SignatureMethod=HmacSHA256" & _ 
    "&SignatureVersion=2" & _ 
    "&Timestamp=" & strTimestamp & _ 
    "&Version=2009-05-15" 

    Dim strStringToSign As String = "GET\nelasticloadbalancing.amazonaws.com\n/\n" & strParams 

    strURL = strURL & strParams & "&Signature=" & PercentEncodeRfc3986(HashString(strStringToSign)) 

    Dim wc As New WebClient() 
    Dim strResponse As String 
    strResponse = wc.DownloadString(strURL) 

End Sub 


Private Const PRIVATE_KEY As String = "<MY_PRIVATE_KEY>" 

Private Function HashString(ByVal StringToHash As String) As String 
    Dim Key() As Byte = Encoding.UTF8.GetBytes(PRIVATE_KEY) 
    Dim XML() As Byte = Encoding.UTF8.GetBytes(StringToHash) 
    Dim myHMACSHA256 As New System.Security.Cryptography.HMACSHA256(Key) 
    Dim HashCode As Byte() = myHMACSHA256.ComputeHash(XML) 
    Return Convert.ToBase64String(HashCode) 
End Function 


Private Function PercentEncodeRfc3986(ByVal str As String) As String 

    str = HttpUtility.UrlEncode(str, System.Text.Encoding.UTF8) 
    str = str.Replace("'", "%27").Replace("(", "%28").Replace(")", "%29").Replace("*", "%2A").Replace("!", "%21").Replace("%7e", "~").Replace("+", "%20").Replace("%7E", "~") 

    Dim sbuilder As StringBuilder = New StringBuilder(str) 
    For i As Int32 = 0 To sbuilder.Length - 1 

     If sbuilder(i) = "%" Then 
      If (Char.IsLetter(sbuilder(i + 1)) OrElse Char.IsLetter(sbuilder(i + 2))) Then 
       sbuilder(i + 1) = Char.ToUpper(sbuilder(i + 1)) 
       sbuilder(i + 2) = Char.ToUpper(sbuilder(i + 2)) 
      End If 
     End If 
    Next 
    Return sbuilder.ToString() 
End Function 

回答

1

好吧,我得查个水落石出。有几个问题;不仅仅是亚马逊的文档。

  • 在VB.Net,我应该使用ControlChars.Lf而非已经 “\ n”
  • Instances.member.N参数作为记录 是错误的,它应该是
    Instances.member。[N] .InstanceId,其中[N]是实例索引,
    开始。这是返回 相当混乱的错误消息
    “LoadBalancerNotFound”。
  • 正确的域名是elasticloadbalancing。[availability_zone] .amazonaws.com;文档中使用的示例也没有使这一点特别明确。 (尽管域名使用在其他地方有记录)