On Mon, Aug 27, 2012 at 10:50 PM, Dr. Stephen Henson wrote: > On Mon, Aug 27, 2012, GWu wrote: >> The email is available at >> http://www.buergerkarte.at/mvnforum/mvnforum/viewthread_thread,272#1180 >> (German language forum, but the email - or it's significant parts >> respectively - is easily visble). >> > > Well I'm not surprised Thunderbird and OpenSSL has problems with that. The > signature is malformed. It should contain the digest enclosed in an ASN1 > structure called DigestInfo but it isn't: it just contains the raw digest.
Can you give me a hint where to find DigestInfo or the offending raw digest in the result of asn1parse? I can spot messageDigest, which is shown as: 3957:d=7 hl=2 l= 9 prim: OBJECT :messageDigest 3968:d=7 hl=2 l= 22 cons: SET 3970:d=8 hl=2 l= 20 prim: OCTET STRING [HEX DUMP]:38BA6AE720F09EFFB46BC8859293743DD13EDBF0 But this looks very similar in a message which verifies successfully. The asn1parse output of another, successfully verified signature also does not contain "DigestInfo". Is DigestInfo a structure inside messageDigest in asn1parse output? If yes, is there a way to display it in structured/readable form? Or did you mean that the content inside of messageDigest is not encoded properly? Thanks for any advice and please excuse my beginner's questions, I'm trying to get a grip on these things ... ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List [email protected] Automated List Manager [email protected]
