rsautl sign failed with fips openssl-0.9.8m

2010-03-05 Thread kai_yang2008
Hi All, I have build a fips-openssl with the openssl-0.9.8m and fips-1.2. But when i run the command using rsautl: openssl rsautl -sign -in file -inkey rsakey -out file_sign_pem -keyform PEM it will produce an error like this : RSA operation error 22262:error:0408908E:rsa

Re: rsautl sign failed with fips openssl-0.9.8m

2010-03-05 Thread Dr. Stephen Henson
On Thu, Mar 04, 2010, kai_yang2008 wrote: Hi All, I have build a fips-openssl with the openssl-0.9.8m and fips-1.2. But when i run the command using rsautl: openssl rsautl -sign -in file -inkey rsakey -out file_sign_pem -keyform PEM it will produce an error like this : RSA

Downages

2010-03-05 Thread The Doctor
2 nights in a row?! What is going on ??!! -- Member - Liberal International This is doc...@nl2k.ab.ca Ici doc...@nl2k.ab.ca God, Queen and country! Never Satan President Republic! Beware AntiChrist rising! http://twitter.com/rootnl2k http://www.facebook.com/dyadallee Hey! Hey! Ho! Ho! Lying

SET-OF canonical ordering

2010-03-05 Thread Boßlet , Martin
Hello, I hope this is the right place to ask this question: We were having trouble with a CMS signature and we finally located the problem. The underlying implementation interpreted the canonical DER encoding for SET-OF different from the implementation that we were using. 1. The first

Re: SET-OF canonical ordering

2010-03-05 Thread Dr. Stephen Henson
On Fri, Mar 05, 2010, Bolet, Martin wrote: Hello, I hope this is the right place to ask this question: We were having trouble with a CMS signature and we finally located the problem. The underlying implementation interpreted the canonical DER encoding for SET-OF different from the

Re: Applying the RSASSA-PSS patch

2010-03-05 Thread Martin Kaiser
Erwann, all, Thus wrote Erwann ABALEA (erwann.aba...@keynectis.com): Applying the patch resulted in a positive and a negative effect: - I was able to verify the rsassaPss certificates - I wasn't able to verify ecdsa-with-SHA{1,256} certificates (yes, even SHA1 ones) The error I get is

RE: SET-OF canonical ordering

2010-03-05 Thread PMHager
Martin Boßlet wrote on March 05, 2010: At first I thought the second implementation was wrong, but then again I read the ITU specification for DER encodings, http://www.itu.int/rec/T-REC-X.690-200207-S/en. The latest version is at: [http://www.itu.int/rec/T-REC-X.690-200811-I/en] In