Hello, Small update on the problem.. fixed it! :) Thanks to the people who helped me...
Anyhow, now I have a signature verification problem. Indeed when I try
to verify the signature after reloading it, it fails saying that it
does not find the digest algorithm.
Indeed when I call the ASN1_item_verify(), in the asn1/a_verify.c function
the following error occurs:
14250:error:0D0C50A1:lib(13):func(197):reason(161):a_verify.c:141:
I tried to trace the problem, and I found that it resides in the
following piece of code:
i=OBJ_obj2nid(a->algorithm);
type=EVP_get_digestbyname(OBJ_nid2sn(i));
The OBJ_nid2sn returns the `RSA-SHA1` which is not recognized by the
EVP_get_digestbyname() function. This value is automatically set when
the ASN1_item_sign() is called.
The funny thing is that on the server, the same value is extracted and
the ASN1_item_verify() function completes with a sound `1` as a result,
while on the client (although the *same value* is extracted [65]) the
ASN1_item_verify() fails at line 141...
Still working to find the cause, but if you have an idea of where I am
doing mistakes, please let me know... :)
Later,
Max
P.S.: By using the X509_signature_print() I get no errors on both the
server and the client...
--
Best Regards,
Massimiliano Pala
--o------------------------------------------------------------------------
Massimiliano Pala [OpenCA Project Manager] [EMAIL PROTECTED]
[EMAIL PROTECTED]
Dartmouth Computer Science Dept Home Phone: +1 (603) 397-3883
PKI/Trust - Office 063 Work Phone: +1 (603) 646-9179
--o------------------------------------------------------------------------
smime.p7s
Description: S/MIME Cryptographic Signature
