You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@santuario.apache.org by bu...@apache.org on 2006/09/27 12:11:54 UTC

DO NOT REPLY [Bug 40085] - SHA256 Signature with SHA1 OID

DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG�
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
<http://issues.apache.org/bugzilla/show_bug.cgi?id=40085>.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND�
INSERTED IN THE BUG DATABASE.

http://issues.apache.org/bugzilla/show_bug.cgi?id=40085


blautenb@apache.org changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |ASSIGNED




------- Additional Comments From blautenb@apache.org  2006-09-27 10:11 -------
Looking at this now.  The way the code was originally written it expects a SHA-1
has for RSA.  It will also fail in a similar manner for MD-5 based sig.  The sig
would be calculated with a SHA-1 DER encoded prefix.

I will add some code to the RSA validation interface to pass it the hash
algorithm and take the OID values from PCKS 1.

-- 
Configure bugmail: http://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.