On Thu, Sep 20, 2007, [EMAIL PROTECTED] wrote: > Hi, > > I am trying to perform certification verification for a self-signed CA > certificate as well as another certificate signed by this CA. The problem is > that the verification always fails. > > Here is what I do: > > /* Convert the DER encoded certificate into an X509 structure used by SSL. */ > x509_manufCert = d2i_X509_fp(manufCert, &(x509_manufCert)); > > /* Get the public key information from the certificate.*/ > pubKey = X509_get_pubkey(x509Cert); > > status = X509_verify(x509fCert, pubKey); > > > The return status is always -1. I attempted to convert the pubKey into its > DER format to compare it with the original one in the DER certificate using > the following: >
Read the FAQ for details of how to get a meaningful error message. Steve. -- Dr Stephen N. Henson. Email, S/MIME and PGP keys: see homepage OpenSSL project core developer and freelance consultant. Funding needed! Details on homepage. Homepage: http://www.drh-consultancy.demon.co.uk ______________________________________________________________________ OpenSSL Project http://www.openssl.org Development Mailing List [email protected] Automated List Manager [EMAIL PROTECTED]
