Hello, I am facing a very strange problem here: openssl successfully creates signatures but when run by www-data, the signatures are invalid! All files are readable and there are not error messages:
# openssl version OpenSSL 0.9.8o 01 Jun 2010 # echo -ne Test | openssl dgst -ecdsa-with-SHA1 -sign activation.key > /tmp/asRoot.der # su user1 $ echo -ne Test | openssl dgst -ecdsa-with-SHA1 -sign activation.key > /tmp/asUser.der $ exit # su www-data $ echo -ne Test | openssl dgst -ecdsa-with-SHA1 -sign activation.key > /tmp/asWww-data.der All files (as*.der) are transfered to a different computer for verification with the public key: $ echo -ne Test | openssl dgst -verify activation.pub -keyform DER -signature asRoot.der Verified OK $ echo -ne Test | openssl dgst -verify activation.pub -keyform DER -signature asUser.der Verified OK $ echo -ne Test | openssl dgst -verify activation.pub -keyform DER -signature asWww-data.der Verification Failure $ openssl version OpenSSL 1.0.1e 11 Feb 2013 I don't believe it! What is wrong here? Thanks, Luke ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List [email protected] Automated List Manager [email protected]
