RE: Question regarding PKCS7_verify

2011-03-17 Thread prk j
..@hotmail.com To: openssl-users@openssl.org Subject: RE: Question regarding PKCS7_verify Date: Thu, 10 Mar 2011 13:49:08 -0800 Thanks for quick response. Adding -purpose any surely works. I had to change my code to get certs from PKCS7 structure and create X509 store context and set purpose

RE: Question regarding PKCS7_verify

2011-03-10 Thread prk j
. Currently openssl version I am using is 0.9.8g. I remember it was working with 0.9.7. Or it never checked or ignored purpose. Thanks for your help. Prkj > Date: Thu, 10 Mar 2011 22:05:03 +0100 > From: st...@openssl.org > To: openssl-users@openssl.org > Subject: Re: Question regarding

Re: Question regarding PKCS7_verify

2011-03-10 Thread Dr. Stephen Henson
On Thu, Mar 10, 2011, prk j wrote: > > Hi, > > I am new at using openssl API's. Here is my situation. > > I have following set of certificates with X509 extensions defined for code > signing in PKCS#7 format. > > Root CA - Key usage (critical): Certificate Sign, CRL Sign > CVC Sub- CA - Key u

Question regarding PKCS7_verify

2011-03-10 Thread prk j
Hi, I am new at using openssl API's. Here is my situation. I have following set of certificates with X509 extensions defined for code signing in PKCS#7 format. Root CA - Key usage (critical): Certificate Sign, CRL Sign CVC Sub- CA - Key usage (critical): Certificate Sign, CRL Sign CVC cert - K