Hi,


I have written an application for signing some data. Earlier I was using 
Openssl 1.0.2n, where everything was working fine. Now I upgraded to Openssl 
1.1.0g and made changes in my code as required. Here i have to send CSR to my 
server. Before that i have some "CSR content with hash" and i am using 
"TSPI_HASH_SIGN" function. But problem is, this function will again hash my 
"content with hash". So when i send CSR to server then it says that Signature 
Verification failed(I have attched my CSR picture here.)

My code is as below:

Tspi_Context_CreateObject(HConText, TSS_OBJECT_TYPE_HASH, TSS_HASH_SHA256, 
&H_Hash);

Tspi_Hash_UpdateHashValue(H_Hash,datalen,data);

Tspi_Hash_Sign(H_Hash, KeY_Signing, &Signature_Length, &Signature_Data);


Is there any other method or API, so that I can send my "content with hash" to 
sign only(without hashing again)?
_______________________________________________
TrouSerS-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/trousers-users

Reply via email to