Re: how to (more manually) verify signature in SignedData ?

2013-01-23 Thread Jakob Bohm
On 1/22/2013 12:36 PM, kapetr wrote: ... just little P.S.: the -pkeyopt digest:sha256 is probably (?) necessary while the signatureAlgorithm in SIgnerInfo is "sha256WithRSAEncryption" I have another TS reply (from Comodo) and there is only "rsaEncryption" I think there the verification will wo

RE: how to (more manually) verify signature in SignedData ?

2013-01-22 Thread kapetr
rsa only without the -pkeyopt. And about the HASH - the correct command I had mean: $ hexdump -C Komu: dthomp...@prinpay.com, openssl-users@openssl.org Předmět: RE: how to (more manually) verify signature in SignedData ? Datum: 22.1.2013 - 11:55:16 > Hello, > > - PŮVODNÍ ZPRÁVA -

RE: how to (more manually) verify signature in SignedData ?

2013-01-22 Thread kapetr
Hello, - PŮVODNÍ ZPRÁVA - Od: "Dave Thompson" Komu: openssl-users@openssl.org Předmět: RE: how to (more manually) verify signature in SignedData ? Datum: 22.1.2013 - 0:33:35 > > > The RSA-signed value is not just the hash, but a small > structure encoding it, a

RE: how to (more manually) verify signature in SignedData ?

2013-01-21 Thread Dave Thompson
> From: owner-openssl-us...@openssl.org On Behalf Of kapetr > Sent: Monday, 21 January, 2013 05:27 > I'm trying to manually verify signature in some SignedData > ASN.1 structures, which is used in most cases in signature - > e.g. S/MIME, Timestamps, ... using x.509 certificates. > > Lets see th

how to (more manually) verify signature in SignedData ?

2013-01-21 Thread kapetr
Hello, I'm trying to manually verify signature in some SignedData ASN.1 structures, which is used in most cases in signature - e.g. S/MIME, Timestamps, ... using x.509 certificates. Lets see this example: -in file.tsr is Time Stamp reply - it contains SignedData structure (at byte 9 offset) w