Hello all:

With the attached program building the input (it generates test.der), I am 
seeing the following errors (using OpenSSL 0.9.8o with CMS enabled):

openssl cms -verify -noverify -inform der -in /tmp/test.der > /tmp/blah.der
Verification failure
22937:error:2E09A09E:CMS routines:CMS_SignerInfo_verify_content:verification 
failure:cms_sd.c:917:
22937:error:2E09D06D:CMS routines:CMS_verify:content verify 
error:cms_smime.c:431:

This error looks like the messageDigest is not correctly being generated 
somehow. Does anyone know if there are any bugs in the cms backport to 0.9.8 or 
workarounds that need to be applied to 0.9.8 to get this to work? Or, 
conversely, after looking at the code, can anyone point out what dumb mistake 
that I'm making?

Thanks.

Attachment: openssl_example.cc
Description: Binary data


---
Patrick Patterson
Chief PKI Architect
Carillon Information Security Inc.
http://www.carillon.ca





Reply via email to