On Wed, Jul 20, 2005, Thomas J. Hruska wrote: > Dr. Stephen Henson wrote: > >On Wed, Jul 20, 2005, Thomas J. Hruska wrote: > > > > > >Well an indication of the error codes would help. Something just "not > >working" doesn't help much... > > > > I don't have access to PayPal's internal systems and neither did the > people I spoke with in Technical Support. Apparently only the > developers are allowed to know what error messages are generated - and > the developers don't get out much. The encrypted and signed data block > on my end are generated perfectly every time without any errors from any > function (each function is checked for error conditions). > > The only error condition given is error 5302. This is an internal > PayPal error code and the only known "fix" that Tech. Support has is to > remove all whitespace from the PKCS#7 data block. That didn't fix my > problem, which only served to confuse the support person. It seemed > like a hack'ish sort of fix to me anyway. >
IIRC Paypal use OpenSSL though I don't know any more details about how they are using it. If there's a signed data structure witing an enveloped data one then whitespace isn't likely to be a problem. It could be something related to the signing time. When you sign data it includes a signing time. Its possible they are checking that against the time or receipt and if there is a large skew they will reject it. Steve. -- Dr Stephen N. Henson. Email, S/MIME and PGP keys: see homepage OpenSSL project core developer and freelance consultant. Funding needed! Details on homepage. Homepage: http://www.drh-consultancy.demon.co.uk ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List openssl-users@openssl.org Automated List Manager [EMAIL PROTECTED]