Re: PKCS7_decrypt vs RSA OAEP padding

2021-04-15 Thread Michal Moravec
VICTORY! After replacing the PEM_write_bio_PKCS7/PEM_read_bio_CMS methods for i2d_PKCS7_bio/d2i_CMS_bio https://github.com/EtneteraLogicworks/libscep/commit/b16cd6a97c979abd6ca0ab7af7a944ef553cf17d PCKS7 (In this case CMS) decryption now works! Code now looks like: handle_encrypted_content(SCE

Re: PEM_read_bio_RSAPublicKey equivalent API which returns EVP_PKEY

2021-04-15 Thread Skip Carter
-BEGIN PGP SIGNED MESSAGE- Hash: SHA384 Sunil, Sorry, I didn't notice that you were talking about 3.0. My solution works for 1.1.1i. It looks like I am going to have your problem when I migrate to 3.0 too. On Thu, 2021-04-15 at 04:30 +, Paramashivaiah, Sunil wrote: > Hi Skip Carte

Re: PKCS7_decrypt vs RSA OAEP padding

2021-04-15 Thread Michal Moravec
Thank you for the tip. I replaced the Debian 1.1.1d with 1.1.1.k built from source using ./config -d Using file on the libcrypto.so.1.1 library now shows "with debug_info, not stripped". ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=29204b7f7a988f750cd

Re: PKCS7_decrypt vs RSA OAEP padding

2021-04-15 Thread Jakob Bohm via openssl-users
On 2021-04-15 12:57, Michal Moravec wrote: Follow-up on my previous email: I modified my proof-of-problem program to load PKCS7 file into PKCS7 and convert it to CMS_ContentInfo using the BIO (See convert.c in the attachment). It is similar to this: handle_encrypted_content(SCEP *handle, SC

Re: PKCS7_decrypt vs RSA OAEP padding

2021-04-15 Thread Michal Moravec
Follow-up on my previous email: I modified my proof-of-problem program to load PKCS7 file into PKCS7 and convert it to CMS_ContentInfo using the BIO (See convert.c in the attachment). It is similar to this: handle_encrypted_content(SCEP *handle, SCEP_DATA *data, PKCS7 *p7env, X509 *dec_cert, E

Re: Help with i2d_CMS_bio_stream from OpenSSL 1.0 to OpenSSL 1.1.1j

2021-04-15 Thread Fabio
Hi all, I apologize but I just figured out that the problem is not the stack as i supposed. I tried a i2d_X509 and i2d_X509_bio and the output DER certificate i was pushing in is broken... How is it possible? Clearly I read it from a file so it could be broken in the d2i version too... Il giorno