RE: Manually verifying signature on X.509 certificate

2008-05-09 Thread Anthony Floyd
> There is an example here: > > http://www.openssl.org/docs/apps/rsautl.html#EXAMPLES > Awesome, that is exactly what I'm looking for. Thanks! Anthony. __ OpenSSL Project http://www.openssl.org

RE: Manually verifying signature on X.509 certificate

2008-05-09 Thread Anthony Floyd
> This page is helpful as well: > http://en.wikipedia.org/wiki/X.509 > > Under "Structure of a certificate", it shows that a > certificate consists of > an inner certificate (sometimes called the TBS certificate), > followed by the > certificate signature algorithm and the signature itself. The

RE: Manually verifying signature on X.509 certificate

2008-05-09 Thread Anthony Floyd
> To do that properly you do need to at least parse some of the > ASN1 data. There > is some header information at the start which contains the > SEQUENCE tag+length > bytes. Right. This isn't a problem, as I've been pulling the data out by parsing the ASN.1 data anyway. > The actual bit you

RE: Manually verifying signature on X.509 certificate

2008-05-08 Thread Anthony Floyd
> So to check the signature, it should be as easy as to hash > the data, decrypt the signature with the public key and > compare the two. Of course, I meant: hash the data, encrypt the hash with the public key and compare to signature. Thanks, Anthony.

Manually verifying signature on X.509 certificate

2008-05-08 Thread Anthony Floyd
re, and so on. I've tried stripping only the signature and systematically removing more and more, but still no match. Any suggestions? Thanks, Anthony. -- Anthony Floyd, PhD Convergent Manufacturing Technologies Inc. 6190 Agronomy Rd, Suite 403 Vancouver BC V6T 1Z3 CANADA Email: [EMAIL