https://issues.apache.org/bugzilla/show_bug.cgi?id=49660

           Summary: Signature Verification with NSS option fails
           Product: Security
           Version: C++ 1.5.1
          Platform: All
        OS/Version: All
            Status: NEW
          Severity: critical
          Priority: P2
         Component: Signature
        AssignedTo: security-dev@xml.apache.org
        ReportedBy: ma...@avaya.com


Created an attachment (id=25811)
 --> (https://issues.apache.org/bugzilla/attachment.cgi?id=25811)
This patch adds digest creation logic (copied from signing method) before
signtaure verification

Signature Verification with NSS fails. 
Signature verification method in NSSCryptoKeyRSA.cpp does not follow digest
creation in signature generation method. 
he Signtaure creation logic is changed (a disgest of hashbuffer is added) in
1.3.1  but the verification logic did not change in 1.3.1 or any subsequent
versions.

-- 
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

Reply via email to