Hi folks: I am working in a little application for signing files. I used the PEM_SignInit, PEM_SignUpdate and PEM_SignFinal functions that simply call funtions in EVP library. The signing part of the app seems to work fine (well, I think it does). I have some troubles with the verifying part. Here are some questions: EVP_VerifyFinal: I suppose the new generated hash is in the EVP_MD_CTX structure (previously I will call EVP_VerifyInit and EVP_VerifyUpdate) and that the encrypted hash is passed through "sigbuf" (I used the openssl/deni/sign code as reference). Am I rigth? The EVP_MD structure defines pointers to functions for signing and verifying. Though I have been leafing through the code, I am not able to find an MD5_Init() function that returns a structure with these values set. Doc says nothing about it. Has anybody a clue? Thanks (and pardon my poor English) --------------------------------------------------------------------------- --------- Roberto Lopez Navarro mailto: [EMAIL PROTECTED] SGI Soluciones Globales Internet [GMV Sistemas, S.A.] http://www.esegi.es Tfno: +34 91 806 46 40 Fax: +34 91 806 46 41 --------------------------------------------------------------------------- --------- ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]