I am unable to verify the Verisign/RSA Secure Server CA certificate
when using the Cryptoswift card. It works fine when I turn off the
hardware acceleration. As far as I can tell, all other certificates
verify properly.
$ ./openssl verify -verbose -engine openssl -CApath ../certs \
../certs/vsignss.pem
engine "openssl" set.
../certs/vsignss.pem:
OK
$ ./openssl verify -verbose -engine cswift -CApath ../certs \
../certs/vsignss.pem
engine "cswift" set.
../certs/vsignss.pem:
/C=US/O=RSA Data Security, Inc./OU=Secure Server Certification Authority
error 7 at 0 depth lookup:certificate signature failure
22300:error:26066072:engine routines:CSWIFT_MOD_EXP:request
failed:hw_cswift.c:396:CryptoSwift error number is -10020
22300:error:0D079006:asn1 encoding routines:ASN1_verify:bad get asn1
object call:a_verify.c:109:
-Kevin
OpenSSL self-test report:
OpenSSL version: 0.9.6b
Last change: Change ssleay_rand_bytes (crypto/rand/md_rand.c)...
Options: --prefix=/tmp/kevinb/usr/local/src/build
--openssldir=/tmp/kevinb/usr/local/src/build/openssl
OS (uname): Linux pos2.fugunet.kom 2.2.14-5.0 #1 Tue Mar 7 21:07:39 EST 2000
i686 unknown
OS (config): i686-whatever-linux2
Target (default): linux-elf
Target: linux-elf
Compiler: gcc version egcs-2.91.66 19990314/Linux (egcs-1.1.2 release)
Test passed.
