RE: XML-Security-C with OpenSSL overly strict about base64 line lengths

2005-03-21 Thread Jesse Pelton
> Sent: Saturday, March 19, 2005 9:28 PM > To: security-dev@xml.apache.org > Subject: Re: XML-Security-C with OpenSSL overly strict about > base64 line lengths > > Jesse Pelton wrote: > > > OpenSSLCryptoKeyRSA::verifySHA1PKCS1Base64Signature() uses OpenSSL's > &g

Re: XML-Security-C with OpenSSL overly strict about base64 line lengths

2005-03-19 Thread Berin Lautenbach
Jesse Pelton wrote: OpenSSLCryptoKeyRSA::verifySHA1PKCS1Base64Signature() uses OpenSSL's EVP_Decode...() routines to decode the base64 contents of SignatureValue. This fails if line breaks don't occur where OpenSSL thinks they should. I think this is contrary to the specification (see rationale b

XML-Security-C with OpenSSL overly strict about base64 line lengths

2005-03-18 Thread Jesse Pelton
OpenSSLCryptoKeyRSA::verifySHA1PKCS1Base64Signature() uses OpenSSL's EVP_Decode...() routines to decode the base64 contents of SignatureValue. This fails if line breaks don't occur where OpenSSL thinks they should. I think this is contrary to the specification (see rationale below), and that this