Just a note, I've found documents like
http://ietfreport.isoc.org/all-ids/draft-ietf-ediint-compression-08.txt
which in secction 2.1 says to calculate MIC on the original data that was
signed as PER [AS1] (but 4130 is AS2)


In section 7.3.1.3 of 4130, first paragraph in bullets it is said:


 For any signed messages, the MIC to be returned is calculated
         on the RFC1767/RFC3023 MIME header and content.
         Canonicalization on the MIME headers MUST be performed before
         the MIC is calculated, since the sender requesting the signed
         receipt was also REQUIRED to canonicalize.


and in 7.1.8 of 4130


The EC Interchange and the RFC 1767 MIME EDI content header can
   actually be part of a multi-part MIME content-type.  When the EDI
   Interchange is part of a multi-part MIME content-type, the MIC MUST
   be calculated across the entire multi-part content, including the
   MIME headers.


In any case I tried 


*the original data

*the 1767 (edi block with header and content)

*the whole multipart/signed document (this multipart/signed header + the edi
block and the signature block with boundaries, etc)



which else should I try?


Thanks




-- 
View this message in context: 
http://www.nabble.com/RFC-4130-checksum-in-SHA1-tp18034577p18040522.html
Sent from the OpenSSL - User mailing list archive at Nabble.com.

Reply via email to