Thank you for your answer.
I don't know OpenSSL that well, so I just wanted to know if I was doing something 
wrong or there were some "inconsistencies" in the OpenSSL code.
But now that I know it's a bug, I'll try to work around it.

Regards,
Kim

-----Oprindelig meddelelse-----
Fra: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] vegne af Dr. Stephen Henson
Sendt: 8. september 2004 19:09
Til: [EMAIL PROTECTED]
Emne: Re: SV: SV: SV: Signed PKCS#7 without a certificate included ?


On Wed, Sep 08, 2004, Hellan.Kim KHE wrote:

> Any comments on this issue?
> Am I doing something wrong, or is there really an error in the PKCS7_verify() 
> function?
> 

I'd thought you could avoid this issue by disabling signature verification and
certificate verification, since then the code wont need a certificate at all.

However due to a bug in the code it still needs a signer's certificate. A work
around is to supply the correct signer's certificate which it will then
effectively ignore.

I'll commit a fix when I have time to look at this in more detail.

Steve.
--
Dr Stephen N. Henson. Email, S/MIME and PGP keys: see homepage
OpenSSL project core developer and freelance consultant.
Funding needed! Details on homepage.
Homepage: http://www.drh-consultancy.demon.co.uk
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]




___________________________________________________________________
www.kmd.dk   www.kundenet.kmd.dk   www.eboks.dk   www.civitas.dk   www.netborger.dk

Hvis du har modtaget denne mail ved en fejl vil jeg gerne, at du informerer mig og 
sletter den.
KMD skaber it-services, der fremmer effektivitet hos det offentlige, erhvervslivet og 
borgerne.

If you received this e-mail by mistake, please notify me and delete it. Thank you.
Our mission is to enhance the efficiency of the public sector and improve its service 
of the general public. 

______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to