> -----Original Message-----
> From: Nikos Mavrogiannopoulos [mailto:[email protected]] On 
> Behalf Of Nikos Mavrogiannopoulos
> Sent: Wednesday, December 08, 2010 2:28 PM
> To: Murray S. Kucherawy
> Cc: [email protected]
> Subject: Re: RSA sign/verify and hash generation functions
> 
> On 12/08/2010 12:30 AM, Murray S. Kucherawy wrote:
> 
> > assert(gnutls_privkey_sign_hash(rsa_key, &dd, &rsa_out ==
> GNUTLS_E_SUCCESS);
> 
> Also check the documentation of the functions you are using :)

I did.  By the looks of things, the *_sign_hash() functions look like they sign 
a hash that's already been computed, which is the case for me, so that's what I 
used.

> The sign_hash is low-level and isn't intended to be used like that.
> Use gnutls_x509_privkey_sign_data() and
> gnutls_x509_privkey_verify_data().

OK, I'll give those a try.
_______________________________________________
Help-gnutls mailing list
[email protected]
http://lists.gnu.org/mailman/listinfo/help-gnutls

Reply via email to