Thank you for your answer. I don't know OpenSSL that well, so I just wanted to know if I was doing something wrong or there were some "inconsistencies" in the OpenSSL code. But now that I know it's a bug, I'll try to work around it.
Regards, Kim -----Oprindelig meddelelse----- Fra: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] vegne af Dr. Stephen Henson Sendt: 8. september 2004 19:09 Til: [EMAIL PROTECTED] Emne: Re: SV: SV: SV: Signed PKCS#7 without a certificate included ? On Wed, Sep 08, 2004, Hellan.Kim KHE wrote: > Any comments on this issue? > Am I doing something wrong, or is there really an error in the PKCS7_verify() > function? > I'd thought you could avoid this issue by disabling signature verification and certificate verification, since then the code wont need a certificate at all. However due to a bug in the code it still needs a signer's certificate. A work around is to supply the correct signer's certificate which it will then effectively ignore. I'll commit a fix when I have time to look at this in more detail. Steve. -- Dr Stephen N. Henson. Email, S/MIME and PGP keys: see homepage OpenSSL project core developer and freelance consultant. Funding needed! Details on homepage. Homepage: http://www.drh-consultancy.demon.co.uk ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED] ___________________________________________________________________ www.kmd.dk www.kundenet.kmd.dk www.eboks.dk www.civitas.dk www.netborger.dk Hvis du har modtaget denne mail ved en fejl vil jeg gerne, at du informerer mig og sletter den. KMD skaber it-services, der fremmer effektivitet hos det offentlige, erhvervslivet og borgerne. If you received this e-mail by mistake, please notify me and delete it. Thank you. Our mission is to enhance the efficiency of the public sector and improve its service of the general public. ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]