On Wed, Mar 17, 2010, Thomas Anderson wrote: > According to <http://linuxmanpages.com/man1/rsautl.1.php>, you can > sign data with OpenSSL. My question is how? I tried to sign my > private key and got the following error: > > ubu...@ubuntu:~$ openssl rsautl -sign -in rsa.txt -inkey rsa.txt -out sig > Enter pass phrase for rsa.txt: > RSA operation error > 1543:error:0406C06E:rsa routines:RSA_padding_add_PKCS1_type_1:data too > large for key size:rsa_pk1.c:73: > > If I didn't know better, I'd guess that rsautl wasn't signing messages > but rather was encrypting them, even though I had "out -sig" set. So > how do I sign with rsautl? Is it even possible? And how do I sign > with PSS as opposed to PKCS#1?
You can use the dgst utility to sign bulk data. If you want to use PSS you can use the -sigopt option in OpenSSL 1.0.0 to change the padding mode. Steve. -- Dr Stephen N. Henson. OpenSSL project core developer. Commercial tech support now available see: http://www.openssl.org ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List [email protected] Automated List Manager [email protected]
