Hi all, I would like to do the following with openssl command line tool:
1. Create CA 2. Create Client 3. Verify Client in One Way Authentication (OWA) Now, I have successfully did first 2 steps using: ./CA.sh –newca ./CA.sh –newreq ./CA.sh –sign I have got private and public keys for both sides CA and Client, as a part of OWA procedure the third side device called Server gets Client certificate. Server needs to: - extract sha1 hash signed with Client private RSA key (Signature Alg: sha1RsaEncrypted) from the certificate - decrypt sha1 hash using Client public RSA key - regenerate sha1 hash on the original message to check if it is correct Once I have got familiar with the OWA I thought the above are ones of most common things anyone will want to do with openssl, however google is unable to find any examples for it so far. What openssl commands will do the above things for me? It would also help me a lot to know the routines I need to use to do the same from within C program. Any help would be much appreciated. regards, Mike -- View this message in context: http://old.nabble.com/Extracting-and-verifying-encrypted-certificate-digest-tp31987195p31987195.html Sent from the OpenSSL - User mailing list archive at Nabble.com. ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List openssl-users@openssl.org Automated List Manager majord...@openssl.org