~ubuntu-branches/ubuntu/precise/openssl098/precise

Received: from minbne.mincom.oz.au (minbne.mincom.oz.au [192.55.196.247]) by cygnus.mincom.oz.au (8.7.5/8.7.3) with SMTP id LAA18962 for <ssl-users@listserv.mincom.oz.au>; Mon, 30 Sep 1996 11:44:51 +1000 (EST)

Received: by minbne.mincom.oz.au id AA22230

(5.65c/IDA-1.4.4 for ssl-users@listserv.mincom.oz.au); Mon, 30 Sep 1996 11:38:41 +1000

Received: from brutus.neuronio.pt (brutus.neuronio.pt [193.126.253.2]) by bunyip.cc.uq.oz.au (8.7.6/8.7.3) with SMTP id LAA15824 for <ssl-users@mincom.com>; Mon, 30 Sep 1996 11:40:07 +1000

Received: (from sampo@localhost) by brutus.neuronio.pt (8.6.11/8.6.11) id BAA08729; Mon, 30 Sep 1996 01:37:40 +0100

Date: Mon, 30 Sep 1996 01:37:40 +0100

Message-Id: <199609300037.BAA08729@brutus.neuronio.pt>

From: Sampo Kellomaki <sampo@neuronio.pt>

To: ssl-users@mincom.com

Cc: sampo@brutus.neuronio.pt

Subject: Signing with envelope routines

Sender: ssl-lists-owner@mincom.com

Precedence: bulk

Status: RO

X-Status: D

I have been trying to figure out how to produce signatures with EVP_

routines. I seem to be able to read in private key and sign some

data ok, but I can't figure out how I am supposed to read in

public key so that I could verify my signature. I use self signed

certificate.

I figured I should use

EVP_PKEY* pkey = PEM_ASN1_read(d2i_PrivateKey, PEM_STRING_EVP_PKEY,

fp, NULL, NULL);

to read in private key and this seems to work Ok.

However when I try analogous

EVP_PKEY* pkey = PEM_ASN1_read(d2i_PublicKey, PEM_STRING_X509,

fp, NULL, NULL);

the program fails with

error:0D09508D:asn1 encoding routines:D2I_PUBLICKEY:unknown public key type:d2i_pu.c:93

error:0906700D:PEM routines:PEM_ASN1_read_bio:ASN1 lib:pem_lib.c:232

I figured that the second argument to PEM_ASN1_read should match the

name in my PEM encoded object, hence PEM_STRING_X509.

PEM_STRING_EVP_PKEY seems to be somehow magical

because it matches whatever private key there happens to be. I could

not find a similar constant to use with getting the certificate, however.

Is my approach of using PEM_ASN1_read correct? What should I pass in

as name? Can I use normal (or even self signed) X509 certificate for

verifying the signature?

When will SSLeay documentation be written ;-)? If I would contribute

comments to the code, would Eric take time to review them and include

them in distribution?

I'm using SSLeay-0.6.4. My program is included below along with the

key and cert that I use.

--Sampo

-----------------------------------

/* sign-it.cpp - Simple test app using SSLeay envelopes to sign data

29.9.1996, Sampo Kellomaki <sampo@iki.fi> */

#include <stdio.h>

#include "rsa.h"

#include "evp.h"

#include "objects.h"

#include "x509.h"

#include "err.h"

#include "pem.h"

#include "ssl.h"

void main ()

{

int err;

int sig_len;

unsigned char sig_buf [4096];

const char certfile[] = "plain-cert.pem";

const char keyfile[] = "plain-key.pem";

const char data[] = "I owe you...";

EVP_MD_CTX md_ctx;

EVP_PKEY* pkey;

FILE* fp;

SSL_load_error_strings();

/* Read private key */

fp = fopen (keyfile, "r"); if (fp == NULL) exit (1);

pkey = (EVP_PKEY*)PEM_ASN1_read ((char *(*)())d2i_PrivateKey,

PEM_STRING_EVP_PKEY,

fp,

NULL, NULL);

if (pkey == NULL) { ERR_print_errors_fp (stderr); exit (1); }

fclose (fp);

/* Do the signature */

EVP_SignInit (&md_ctx, EVP_md5());

100

EVP_SignUpdate (&md_ctx, data, strlen(data));

101

sig_len = sizeof(sig_buf);

102

err = EVP_SignFinal (&md_ctx,

103

sig_buf,

104

&sig_len,

105

pkey);

106

if (err != 1) { ERR_print_errors_fp (stderr); exit (1); }

107

EVP_PKEY_free (pkey);

108

109

/* Read public key */

110

111

fp = fopen (certfile, "r"); if (fp == NULL) exit (1);

112

pkey = (EVP_PKEY*)PEM_ASN1_read ((char *(*)())d2i_PublicKey,

113

PEM_STRING_X509,

114

fp,

115

NULL, NULL);

116

if (pkey == NULL) { ERR_print_errors_fp (stderr); exit (1); }

117

fclose (fp);

118

119

/* Verify the signature */

120

121

EVP_VerifyInit (&md_ctx, EVP_md5());

122

EVP_VerifyUpdate (&md_ctx, data, strlen((char*)data));

123

err = EVP_VerifyFinal (&md_ctx,

124

sig_buf,

125

sig_len,

126

pkey);

127

if (err != 1) { ERR_print_errors_fp (stderr); exit (1); }

128

EVP_PKEY_free (pkey);

129

printf ("Signature Verified Ok.\n");

130

}

131

/* EOF */

132

--------------- plain-cert.pem -----------------

133

-----BEGIN CERTIFICATE-----

134

MIICLDCCAdYCAQAwDQYJKoZIhvcNAQEEBQAwgaAxCzAJBgNVBAYTAlBUMRMwEQYD

135

VQQIEwpRdWVlbnNsYW5kMQ8wDQYDVQQHEwZMaXNib2ExFzAVBgNVBAoTDk5ldXJv

136

bmlvLCBMZGEuMRgwFgYDVQQLEw9EZXNlbnZvbHZpbWVudG8xGzAZBgNVBAMTEmJy

137

dXR1cy5uZXVyb25pby5wdDEbMBkGCSqGSIb3DQEJARYMc2FtcG9AaWtpLmZpMB4X

138

DTk2MDkwNTAzNDI0M1oXDTk2MTAwNTAzNDI0M1owgaAxCzAJBgNVBAYTAlBUMRMw

139

EQYDVQQIEwpRdWVlbnNsYW5kMQ8wDQYDVQQHEwZMaXNib2ExFzAVBgNVBAoTDk5l

140

dXJvbmlvLCBMZGEuMRgwFgYDVQQLEw9EZXNlbnZvbHZpbWVudG8xGzAZBgNVBAMT

141

EmJydXR1cy5uZXVyb25pby5wdDEbMBkGCSqGSIb3DQEJARYMc2FtcG9AaWtpLmZp

142

MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAL7+aty3S1iBA/+yxjxv4q1MUTd1kjNw

143

L4lYKbpzzlmC5beaQXeQ2RmGMTXU+mDvuqItjVHOK3DvPK7lTcSGftUCAwEAATAN

144

BgkqhkiG9w0BAQQFAANBAFqPEKFjk6T6CKTHvaQeEAsX0/8YHPHqH/9AnhSjrwuX

145

9EBc0n6bVGhN7XaXd6sJ7dym9sbsWxb+pJdurnkxjx4=

146

-----END CERTIFICATE-----

147

---------------- plain-key.pem -----------------

148

-----BEGIN RSA PRIVATE KEY-----

149

MIIBPAIBAAJBAL7+aty3S1iBA/+yxjxv4q1MUTd1kjNwL4lYKbpzzlmC5beaQXeQ

150

2RmGMTXU+mDvuqItjVHOK3DvPK7lTcSGftUCAwEAAQJBALjkK+jc2+iihI98riEF

151

oudmkNziSRTYjnwjx8mCoAjPWviB3c742eO3FG4/soi1jD9A5alihEOXfUzloenr

152

8IECIQD3B5+0l+68BA/6d76iUNqAAV8djGTzvxnCxycnxPQydQIhAMXt4trUI3nc

153

a+U8YL2HPFA3gmhBsSICbq2OptOCnM7hAiEA6Xi3JIQECob8YwkRj29DU3/4WYD7

154

WLPgsQpwo1GuSpECICGsnWH5oaeD9t9jbFoSfhJvv0IZmxdcLpRcpslpeWBBAiEA

155

6/5B8J0GHdJq89FHwEG/H2eVVUYu5y/aD6sgcm+0Avg=

156

-----END RSA PRIVATE KEY-----

157

------------------------------------------------

158

Older »