On 11/6/2011 7:33 PM, Maurice Mahieu wrote:
I want to know if it is possible to decrypt the signature from a
server certicate with the issuers public key using openssl.
Depends what you mean by "decrypt the signature".
If you are referring to the RSA-specific terminology of using that
phrase to mean
"Verify the signature", then of cause. The SSL protocol code in OpenSSL
probably
does this by default if used correctly. For doing it outside an SSL
exchange, use
the command line command "openssl verify" or the various "verify" functions
in the OpenSSL programming libraries.
If you are referring to somehow getting the information needed to sign a
different
certificate or otherwise doing stuff that only the certificate issuer
should be able
to do, then no, the whole point is to make this practically impossible
to do, even
if you spend billions of dollars on special hardware and software.
______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List [email protected]
Automated List Manager [email protected]
