> My server gives this error (original openssl library): > 6665:error:04077068:rsa routines:RSA_verify:bad signature:rsa_sign.c:181: > 6665:error:1408807A:SSL routines:SSL3_GET_CERT_VERIFY:bad rsa signature:s3_srvr.c:2353:
> I only modified the client OpenSSL library. Without modifications, > the program works fine. Can anyone tell me what is wrong? Isn't it obvious? You broke the SHA algorithm in the client, causing it to RSA sign the wrong value. When the server checks the signature, it fails because it is a signature of the wrong thing. I mean, you only changed one thing, and you broke something. Therefore, the thing you changed broke the thing that's broken. DS ______________________________________________________________________ OpenSSL Project http://www.openssl.org Development Mailing List openssl-dev@openssl.org Automated List Manager [EMAIL PROTECTED]