Hi Kyle, Thanks for the response. I am using just the libraries of openssl for SCEP implementation. I get the above error when the signature is verified on the server. Probably I was not clear to you guys. I am looking for the solution the above error. Do you have any idea why this error occurs and its resolution.
Thanks and regards, Abhishek wolfoftheair wrote: > > req does not create SCEP requests. (SCEP is currently a draft, and I > don't know if any work on it has occurred in openssl. If it has, it's > probably been on the 0.9.9 branch in CVS, since that's where most new > development is happening.) > > -Kyle H > > On Thu, Sep 4, 2008 at 2:20 AM, [EMAIL PROTECTED] <[EMAIL PROTECTED]> wrote: >> >> Hi all, >> I am working with openssl-0.9.8h to generate SCEP certificates. I am >> getting >> the following errors while the SCEP server is trying to verify the >> signatures: >> >> 24293:error:0407006A:rsa routines:RSA_padding_check_PKCS1_type_1:block >> type >> is not 01:rsa_pk1.c:100: >> 24293:error:04067072:rsa routines:RSA_EAY_PUBLIC_DECRYPT:padding check >> failed:rsa_eay.c:699: >> 24293:error:21071069:PKCS7 routines:PKCS7_signatureVerify:signature >> failure:pk7_doit.c:981: >> >> I have generated my private key through openssl genrsa >cakey.pem and >> certificate using openssl req -config /usr/local/ssl/openssl.cnf -new >> -x509 >> -keyout private/cakey.pem -out cacert.pem -days 365. >> Can anybody tell me how can I add padding to my certificate signing >> request. >> >> Please help me. >> >> Thanks in advance. >> Regards, >> Abhishek >> -- >> View this message in context: >> http://www.nabble.com/rsa-routines%3ARSA_padding_check_PKCS1_type_1%3Ablock-type-is-not-01%3Arsa_pk1.c-tp19306475p19306475.html >> Sent from the OpenSSL - User mailing list archive at Nabble.com. >> ______________________________________________________________________ >> OpenSSL Project http://www.openssl.org >> User Support Mailing List openssl-users@openssl.org >> Automated List Manager [EMAIL PROTECTED] >> > ______________________________________________________________________ > OpenSSL Project http://www.openssl.org > User Support Mailing List openssl-users@openssl.org > Automated List Manager [EMAIL PROTECTED] > > -- View this message in context: http://www.nabble.com/rsa-routines%3ARSA_padding_check_PKCS1_type_1%3Ablock-type-is-not-01%3Arsa_pk1.c-tp19306475p19307633.html Sent from the OpenSSL - User mailing list archive at Nabble.com. ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List openssl-users@openssl.org Automated List Manager [EMAIL PROTECTED]
