« Return to Thread: DO NOT REPLY [Bug 49660] New: Signature Verification with NSS option fails

DO NOT REPLY [Bug 49660] New: Signature Verification with NSS option fails

by Bugzilla from bugzilla@apache.org :: Rate this Message:

| View in Thread

https://issues.apache.org/bugzilla/show_bug.cgi?id=49660

           Summary: Signature Verification with NSS option fails
           Product: Security
           Version: C++ 1.5.1
          Platform: All
        OS/Version: All
            Status: NEW
          Severity: critical
          Priority: P2
         Component: Signature
        AssignedTo: security-dev@...
        ReportedBy: mazum@...


Created an attachment (id=25811)
 --> (https://issues.apache.org/bugzilla/attachment.cgi?id=25811)
This patch adds digest creation logic (copied from signing method) before
signtaure verification

Signature Verification with NSS fails.
Signature verification method in NSSCryptoKeyRSA.cpp does not follow digest
creation in signature generation method.
he Signtaure creation logic is changed (a disgest of hashbuffer is added) in
1.3.1  but the verification logic did not change in 1.3.1 or any subsequent
versions.

--
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

 « Return to Thread: DO NOT REPLY [Bug 49660] New: Signature Verification with NSS option fails