A quick google takes me to http://www.madboa.com/geek/openssl/

which clearly states that failure to verify gives following error :

Verification failure
9544:error:21075075:PKCS7 routines:PKCS7_verify:certificate verify
error:pk7_smime.c:222:Verify error:self signed certificate

Kindest regards,

Peter.

On Friday 01 February 2008 17:20:14 Peter Van Biesen wrote:
> Are you saying that if I do not have the private key -verify says :
>
> "wrong content type"
>
> how does openssl know which key to use for decryption/verification ? Or
> does it just try them all ? I have difficulty to believe that no
> information can be retrieved from the pkcs7 container without the use of
> the private key .
>
> FYI : the reason I'm trying this is is because some messages do not decrypt
> and I need a way to debug the communication. Btw, the messages I attached
> previously were correctly processed ones, not faulty ones.
>
> Kindest regards,
>
> Peter.
>
> On Friday 01 February 2008 16:54:45 Victor Duchovni wrote:
> > On Fri, Feb 01, 2008 at 04:42:50PM +0100, Peter Van Biesen wrote:
> > > yes, I tried that too, same error.
> > >
> > > Just try and slap a mailheader on it ... ( or use the one I tested with
> > > in attachment )
> >
> > Are you trying to "-verify" or "-decrypt"? The former will not work, the
> > message is encrypted.



-- 
Peter Van Biesen
Sysadmin VAPH

tel: +32 (0) 2 225 85 70
fax: +32 (0) 2 225 85 88
e-mail: [EMAIL PROTECTED]
PGP: http://www.vaph.be/pgpkeys

Attachment: signature.asc
Description: This is a digitally signed message part.

Reply via email to