On Fri, Apr 23, 2004, [EMAIL PROTECTED] wrote: > Hi, > > I am trying to sign a file with openssl : > > openssl rsautl -raw -sign -in coucou1.pdf -inkey gilles.pem -out sig > Enter pass phrase for gilles.pem: > RSA operation error > 30452:error:0406B06E:rsa routines:RSA_padding_add_none:data too large for > key size:rsa_none.c:70: > > I did not find anything clear about this error. My key size is 1024. > > How do you sign files with openssl ?
The raw RSA algorithm should not be used for signing files: it can only sign data smaller than the modulus[*]. You can use the appropriate command line options to the 'dgst' command instead. [*] Exactly how much smaller depends on the padding used. Steve. -- Dr Stephen N. Henson. Email, S/MIME and PGP keys: see homepage OpenSSL project core developer and freelance consultant. Funding needed! Details on homepage. Homepage: http://www.drh-consultancy.demon.co.uk ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]
