OpenCA Version : snapshot of the 0.9.2 stable branch Perl Version : v5.8.4 OpenSSL Version : OpenSSL 0.9.8 05 Jul 2005 Operating System: Debian Sarge Used Browsers : IE 6.0 (Firefox 1.5) Used Language(s): de_DE Special Changes : utf-8 enabled
Hi, I am not quite sure whether my problem is a bug in OpenCA or whether I have a configuration error. I have downloaded the snapshot of the 0.9.2 stable branch as described at demo2.openca.info and enabled utf-8 support. When trying to approve a CSR which has german umlauts in the cn (Mäx Müstermänn) I get an error if I use the Internet Explorer for signing: Fehler 6206 Allgemeiner Fehler Es konnte kein PKCS#7-Objekt aus der extrahierten Signatur erstellt werden! OpenCA::PKCS#7 gab den Fehlercode 7911031 zurück (Die Signatur konnte nicht initialisiert werden (7912021). Die Signatur eines PKCS#7-Objektes konnte nicht ausgewertet werden (7921021). Das kryptographische System konnte die Signatur eines PKCS#7-Objektes nicht verifizieren (7742075). OpenCA::OpenSSL->verify: openca-sv failed. [Error]: error:04077068:rsa routines:RSA_verify:bad signature [Info]: Input file intialized. [Info]: Signaturefile initialized. [Info]: Reading Certificate file. [Info]: PKCS#7 object loaded. [Info]: Data is ready for verification. [Info]: Signature Informations (PKCS#7): depth:1 serial:A2C20CF20A68FF42 subject:CN=ELK-WUE Test CA,DC=ELK-WUE,DC=DE depth:0 serial:01 subject:CN=Derek Test1,DC=ELK-WUE,DC=DE [Info]: Signature is corrupt. Errorcode -1. signature:error:-1 ). Signing the same CSR with Mozilla Firefox works. When I take a look at the temporary files created by OpenSSL->verify the xxx_data.tmp file seems to be encoded as UTF-8. After I encode this file as LATIN1 using iconv the call of openca-sv verify works with the IE signature. Taking a look at the signForm.vbs Script it seems like the text signed by CAPICOM is intentionally converted to ASCII/LATIN1. If I remove this call to the UnicodeToAscii function the verification of the signature still doesn't work, because the data seems now to be encoded as Unicode. After I convert the new data.tmp file from UTF-8 to UNICODELITTLE with iconv the openca-sv verify command works. Now I am not sure whether I have made an error during the setup of the OpenCA server or whether this is a bug in the OpenCA utf-8 support. Do you know how to solve this problem? Tahnks & Regards Johannes Derek ------------------------------------------------------- This SF.net email is sponsored by: Splunk Inc. Do you grep through log files for problems? Stop! Download the new AJAX search engine that makes searching your log files as easy as surfing the web. DOWNLOAD SPLUNK! http://ads.osdn.com/?ad_idv37&alloc_id865&op=click _______________________________________________ Openca-Users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/openca-users
