On Thu, Apr 21, 2011 at 6:24 AM, Nate Totura <ntot...@gmail.com> wrote:
>
> Still no luck, I am pretty confident I am sending the PHP routines
> correctly formatted data.
>
> A followup question:
> How can I verify the signature and data using only openssl, here is
> what I am currently doing:
>
>   openssl dgst -sha1 -verify public.key.ssl -signature signature.bin
> data
>

What you are doing is correct. Just make sure that the data file has
no trailing newlines (use a binary editor to remove them, or save as
binary from your Java or PHP program). I just tried it with a response from
Market, it verifies OK.

-- 
You received this message because you are subscribed to the Google
Groups "Android Developers" group.
To post to this group, send email to android-developers@googlegroups.com
To unsubscribe from this group, send email to
android-developers+unsubscr...@googlegroups.com
For more options, visit this group at
http://groups.google.com/group/android-developers?hl=en

Reply via email to