https://issues.apache.org/bugzilla/show_bug.cgi?id=49660
Summary: Signature Verification with NSS option fails Product: Security Version: C++ 1.5.1 Platform: All OS/Version: All Status: NEW Severity: critical Priority: P2 Component: Signature AssignedTo: security-dev@xml.apache.org ReportedBy: ma...@avaya.com Created an attachment (id=25811) --> (https://issues.apache.org/bugzilla/attachment.cgi?id=25811) This patch adds digest creation logic (copied from signing method) before signtaure verification Signature Verification with NSS fails. Signature verification method in NSSCryptoKeyRSA.cpp does not follow digest creation in signature generation method. he Signtaure creation logic is changed (a disgest of hashbuffer is added) in 1.3.1 but the verification logic did not change in 1.3.1 or any subsequent versions. -- Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are the assignee for the bug.