Yes, SHA1 digest computed on the BB using it's API (class SHA1Digest) whatever equals the SHA1 of the same data computed by OpenSSL (SHA1 function, not commandline).
Here's the piece of code that verifies signature on PC's side: int verifyRes = RSA_verify(opensslHashType,(unsigned char *)inputData,inputDataLen,(unsigned char *)signatureData, signDataLen,key); All input data is 100% correct as well as key's public exponent and modulus. opensslHashType is NID_sha1. Dave Thompson-5 wrote: > > Exactly what digests? Do you mean SHA1 of the data computed > on the Blackberry by whatever equals SHA1 of the same data > computed on the PC by OpenSSL? Commandline or program? > > How do you try to verify with OpenSSL -- commandline and > what options, or program and what calls? Exactly what errors > or other results do you get? > > > > ______________________________________________________________________ > OpenSSL Project http://www.openssl.org > Development Mailing List [email protected] > Automated List Manager [email protected] > > -- View this message in context: http://old.nabble.com/RSA-signing%3A-Bouncy-castle-%3C-%3E-Blackberry-%28Certicom%29-API-interoperability-problem-tp32581975p32594858.html Sent from the OpenSSL - Dev mailing list archive at Nabble.com. ______________________________________________________________________ OpenSSL Project http://www.openssl.org Development Mailing List [email protected] Automated List Manager [email protected]
