For now, I managed to make openca-verify work on both Netscape and IE signing (in .../pub/testcertificate). It seems that from signed text (IE) it chocked on "signed time". Since openca-verify is needed (i assume that the behaviour didn't change lately) for verifying signatures, for working with IE i attach the modified lines in verify.c The modification is that openca-verify don't check the signed time. (is this mandatory???)
Perhaps Massimiliano can help us trough, if the signed time is needed. Alex //- from Alex - do we really need the time in signing??? // if ((tm=get_signed_time(si)) != NULL) { // BIO_printf(bio_out," Signed time: "); // ASN1_UTCTIME_print(bio_out,tm); // ASN1_UTCTIME_free(tm); // BIO_printf(bio_out,"\n"); // } _______________________________________________ OpenCA-Devel mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/openca-devel