Hello, > If client sends to server "incompatible" certificate (public key) > than RSA decryption will succeed (I mean RSA_public_decrypt()) > but result will have no sense. My mistake, I should write: I mean in RSA_public_decrypt(), BN_mod_exp_mont() will succeed (real RSA decryption) but removing padding with RSA_padding_check_PKCS1_type_1() will fail and RSA_public_decrypt() will fail.
Best regards, -- Marek Marcola <[EMAIL PROTECTED]> ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List openssl-users@openssl.org Automated List Manager [EMAIL PROTECTED]
