Re: [openssl-users] PKCS7->signerInfo->encryptedDigest not type X509_SIG

2015-09-19 Thread Jakob Bohm
On 19/09/2015 15:34, Michael Heide wrote: Am Wed, 16 Sep 2015 08:55:51 +0200 schrieb Michael Heide : My question now is: how to (proper) handle it? Maybe a more sensible way to handle those signatures with OpenSSL is to still not allow such things but

Re: [openssl-users] PKCS7->signerInfo->encryptedDigest not type X509_SIG

2015-09-19 Thread Michael Heide
Am Wed, 16 Sep 2015 08:55:51 +0200 schrieb Michael Heide : > My question now is: how to (proper) handle it? Maybe a more sensible way to handle those signatures with OpenSSL is to still not allow such things but instead return an error indicating success if

[openssl-users] CBC mode is not working in OpenSSL 1.0.2d

2015-09-19 Thread Jayalakshmi bhat
Hi All, I have ported OpenSSL 1.0.2d on our product. After that CBC mode is not working. Handshakes are failing with bad mac alert failure. When I checked the code mac retrieved from ssl3_cbc_copy_mac does not match with the calculated mac. Any help on this is appreciated. Thanks and Regards