> My server gives this error (original openssl library):
> 6665:error:04077068:rsa routines:RSA_verify:bad signature:rsa_sign.c:181:
> 6665:error:1408807A:SSL routines:SSL3_GET_CERT_VERIFY:bad rsa
signature:s3_srvr.c:2353:

> I only modified the client OpenSSL library. Without modifications,
> the program works fine. Can anyone tell me what is wrong?

Isn't it obvious? You broke the SHA algorithm in the client, causing it to
RSA sign the wrong value. When the server checks the signature, it fails
because it is a signature of the wrong thing.

I mean, you only changed one thing, and you broke something. Therefore, the
thing you changed broke the thing that's broken.

DS


______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
Development Mailing List                       openssl-dev@openssl.org
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to