Multiple Sign

2010-11-05 Thread Anthony Gabrielson
Hello, I think I know the answer to this, but I want to check in and verify. Does anyone know of capability that will allow me sign data with more than one key? Thanks, Anthony__ OpenSSL Project

Re: Force ASN.1 encoding routines to keep existing encoding

2010-11-05 Thread Martin Boßlet
I'm sorry, I was not precise here. Actually I think (have to verify it again though) the encoding is preserved if I parse the EncapContentInfo and reencode it later on without changing the content. My problem was more the other way round: When creating an EncapContentInfo from scratch, can I force

Re: Force ASN.1 encoding routines to keep existing encoding

2010-11-05 Thread Martin Boßlet
OK, great, one thing less to worry about! But I still face a problem with the explicit [0] tagged content of EncapContentInfo. In this particular case it has an indefinite length tag. When I i2d it again , the element is DER-encoded using definite length and content. Can I force the use of the exi

Re: Force ASN.1 encoding routines to keep existing encoding

2010-11-05 Thread Dr. Stephen Henson
On Fri, Nov 05, 2010, Martin Bolet wrote: > > A more general problem is that many signatures pretend to be DER-encoded but > they actually apply the wrong order in DER sets. Thus, computing the message > digest also fails because the set elements are put out in a different order > than the origin

Force ASN.1 encoding routines to keep existing encoding

2010-11-05 Thread Martin Boßlet
Hello all, I face the following problem: I have to parse PKCS#7 SignedData structures, some of which use BER encoding for the EncapContentInfo content, the Certificate and CRL sets and also the unsigned attributes set inside the signer info. The CAdES standard (ETSI TS 101 733 V1.8.1) requires for

Re: Copy of an x509_store variable

2010-11-05 Thread fatma sarhan
Hi, I have to verifiy the signature of many messages sent from a client to a server. So, i want to gard a copy of the certificate because it can be lost after verification. The problem is resolved. I do it defferently. The matter was in my C++ algorithm. Thank you for your help. 2010/11/4 Dr. S