Re: 0x80090006 (Invalid Signature. )
Laszlo Elteto <[email protected]> Thu, 13 Oct 2005 12:32:40 -0400
| Newsgroups | gmane.comp.encryption.cryptoapi |
|---|---|
| Message-ID | <[email protected]> |
This message is in MIME format. Since your mail reader does not understand this format, some or all of this message may not be legible. --===============1887576516== Content-Type: multipart/alternative; boundary="----_=_NextPart_001_01C5D013.B91E55FA" This message is in MIME format. Since your mail reader does not understand this format, some or all of this message may not be legible. ------_=_NextPart_001_01C5D013.B91E55FA Content-Type: text/plain; charset="iso-8859-1" The issue is that Microsoft changed how it allows testing CSPs. For quite a long time the only supported way to test CSP not signed by Microsoft is to load a KERNEL DEBUGGER on the test computer. (You don't have to use it, it's just that it has to be loaded. You are free to use your favorite debugger - or no debugger at all.) Now there is another way to allow loading of CSPs and that's PATCHING advapi32.dll - but that is version specific. In the past I've provided many patching instructions for various Win2k and XP advapi32.dll versions. You can try to visit the Microsoft Platform SDK/Security support forum at http://msdn.microsoft.com/newsgroups/default.aspx?dg=microsoft.public.platfo rmsdk.security <http://msdn.microsoft.com/newsgroups/default.aspx?dg=microsoft.public.platf ormsdk.security> and search for "advapi32" - you will find instructions what bytes to patch and how to replace the system dll. Laszlo Elteto SafeNet, Inc. -----Original Message----- From: [email protected] [mailto:[email protected]]On Behalf Of Chris Bender Sent: Thursday, October 13, 2005 9:13 AM To: [email protected] Subject: [CryptoAPI] 0x80090006 (Invalid Signature. ) Hey everyone, Im new to the list, and I have a feeling this may be a common problem that I am having some trouble diagnosing with google, etc. I have created a csp dll that currently just forwards all calls to the default provider on my machine. I registered the csp in my registry, as it appears in the list of providers when I run csptestsuite.exe I sign it by C:\cspdk>cspSign.exe c C:\p4_sandbox\dev\cbender\MyCSP.dll Then it verifies properly with C:\cspdk>cspSign.exe d C:\p4_sandbox\dev\cbender\MyCSP.dll Now, when I run (ie test CryptAquireContext) C:\cspdk\testSuite\x86>csptestsuite.exe -c "Benders Test Cryptographic Service Provider" -f 0 I get [ API] CryptAcquireContext [ INFO] Returned: False [ INFO] Error type: API failed unexpectedly [ INFO] Known error: No [ INFO] Actual error code: 0x80090006 (Invalid Signature. ) I am running WinXP and when I go to Internet Explorer->Help->About my cipher strength is 128, so I am pretty sure I have the newest crypto dlls installed. Has anyone been able to solve this problem? Thanks Chris _____ This transmission (including any attachments) may contain confidential information, privileged material (including material protected by the solicitor-client or other applicable privileges), or constitute non-public information. Any use of this information by anyone other than the intended recipient is prohibited. If you have received this transmission in error, please immediately reply to the sender and delete this information from your system. Use, dissemination, distribution, or reproduction of this transmission by unintended recipients is not authorized and may be unlawful. The information contained in this electronic mail transmission may be privileged and confidential, and therefore, protected from disclosure. If you have received this communication in error, please notify us immediately by replying to this message and deleting it from your computer without copying or disclosing it. ------_=_NextPart_001_01C5D013.B91E55FA Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable <!DOCTYPE=20HTML=20PUBLIC=20"-//W3C//DTD=20HTML=204.0=20Transitional//EN">= <HTML><HEAD> <META=20HTTP-EQUIV=3D"Content-Type"=20CONTENT=3D"text/html;=20charset=3Dis= o-8859-1"> <TITLE>0x80090006=20(Invalid=20Signature.=20)</TITLE> <META=20content=3D"MSHTML=206.00.2800.1522"=20name=3DGENERATOR></HEAD> <BODY> <DIV><SPAN=20class=3D589352716-13102005><FONT=20face=3DArial=20color=3D#00= 00ff=20size=3D2>The=20 issue=20is=20that=20Microsoft=20changed=20how=20it=20allows=20testing=20CS= Ps.=20For=20quite=20a=20long=20 time=20the=20only=20supported=20way=20to=20test=20CSP=20not=20signed=20by=20= Microsoft=20is=20to=20load=20a=20 KERNEL=20DEBUGGER=20on=20the=20test=20computer.=20(You=20don't=20have=20to= =20use=20it,=20it's=20just=20that=20 it=20has=20to=20be=20loaded.=20You=20are=20free=20to=20use=20your=20favori= te=20debugger=20-=20or=20no=20debugger=20 at=20all.)</FONT></SPAN></DIV> <DIV><SPAN=20class=3D589352716-13102005><FONT=20face=3DArial=20color=3D#00= 00ff=20 size=3D2></FONT></SPAN> </DIV> <DIV><SPAN=20class=3D589352716-13102005><FONT=20face=3DArial=20color=3D#00= 00ff=20size=3D2>Now=20 there=20is=20another=20way=20to=20allow=20loading=20of=20CSPs=20and=20that= 's=20PATCHING=20advapi32.dll=20-=20 but=20that=20is=20version=20specific.=20In=20the=20past=20I've=20provided=20= many=20patching=20 instructions=20for=20various=20Win2k=20and=20XP=20advapi32.dll=20versions.= =20You=20can=20try=20to=20 visit=20the=20Microsoft=20Platform=20SDK/Security=20support=20forum=20at=20= <A=20 href=3D"http://msdn.microsoft.com/newsgroups/default.aspx?dg=3Dmicrosoft.p= ublic.platformsdk.security">http://msdn.microsoft.com/newsgroups/default.a= spx?dg=3Dmicrosoft.public.platformsdk.security</A> and=20 search=20for=20"advapi32"=20-=20you=20will=20find=20instructions=20what=20= bytes=20to=20patch=20and=20how=20 to=20replace=20the=20system=20dll.</FONT></SPAN></DIV> <DIV><SPAN=20class=3D589352716-13102005><FONT=20face=3DArial=20color=3D#00= 00ff=20 size=3D2></FONT></SPAN> </DIV> <DIV><SPAN=20class=3D589352716-13102005><FONT=20face=3DArial=20color=3D#00= 00ff=20size=3D2>Laszlo=20 Elteto</FONT></SPAN></DIV> <DIV><SPAN=20class=3D589352716-13102005><FONT=20face=3DArial=20color=3D#00= 00ff=20 size=3D2>SafeNet,=20Inc.</FONT></SPAN></DIV> <BLOCKQUOTE> =20=20<DIV=20class=3DOutlookMessageHeader=20dir=3Dltr=20align=3Dleft><FONT= =20face=3DTahoma=20 =20=20size=3D2>-----Original=20Message-----<BR><B>From:</B>=20 [email protected]=20 =20=20[mailto:[email protected]]<B>On=20Behalf=20Of=20</B>C= hris=20 =20=20Bender<BR><B>Sent:</B>=20Thursday,=20October=2013,=202005=209:13=20A= M<BR><B>To:</B>=20 [email protected]<BR><B>Subject:</B>=20[CryptoAPI]=200x800900= 06=20(Invalid=20 =20=20Signature.=20)<BR><BR></FONT></DIV><!--=20Converted=20from=20text/rt= f=20format=20--><BR> =20=20<P><FONT=20face=3DArial=20size=3D2>Hey=20everyone,</FONT>=20</P> =20=20<P><FONT=20face=3DArial=20size=3D2>Im=20new=20to=20the=20list,=20and= =20I=20have=20a=20feeling=20this=20may=20 =20=20be=20a=20common=20problem=20that=20I=20am=20having=20some=20trouble=20= diagnosing=20with=20google,=20 =20=20etc.</FONT></P> =20=20<P><FONT=20face=3DArial=20size=3D2>I=20have=20created=20a=20csp=20dl= l=20that=20currently=20just=20 =20=20forwards=20all=20calls=20to=20the=20default=20provider=20on=20my=20m= achine.</FONT>=20</P> =20=20<P><FONT=20face=3DArial=20size=3D2>I=20registered=20the=20csp=20in=20= my=20registry,=20as=20it=20appears=20 =20=20in=20the=20list=20of=20providers=20when=20I=20run=20csptestsuite.exe= </FONT>=20</P> =20=20<P><FONT=20face=3DArial=20size=3D2>I=20sign=20it=20by=20</FONT><BR><= FONT=20face=3DArial=20 =20=20size=3D2>C:\cspdk>cspSign.exe=20c=20C:\p4_sandbox\dev\cbender\MyC= SP.dll</FONT>=20 =20=20</P> =20=20<P><FONT=20face=3DArial=20size=3D2>Then=20it=20verifies=20properly=20= with</FONT>=20<BR><FONT=20 =20=20face=3DArial=20size=3D2>C:\cspdk>cspSign.exe=20d=20 =20=20C:\p4_sandbox\dev\cbender\MyCSP.dll</FONT>=20</P><BR> =20=20<P><FONT=20face=3DArial=20size=3D2>Now,=20when=20I=20run=20(ie=20tes= t=20CryptAquireContext)</FONT>=20 =20=20<BR><FONT=20face=3DArial=20size=3D2>C:\cspdk\testSuite\x86>csptes= tsuite.exe =20 =20=20-c=20"Benders=20Test=20Cryptographic=20Service=20Provider"=20-f=200<= /FONT>=20</P> =20=20<P><FONT=20face=3DArial=20size=3D2>I=20get=20</FONT><BR><FONT=20face= =3DArial=20size=3D2>[ =20 =20=20API] =20CryptAcquireContext</FONT>=20<BR><FONT=20fa= ce=3DArial=20 =20=20size=3D2>[=20INFO] =20Returned:=20False</FONT>=20<B= R><FONT=20face=3DArial=20 =20=20size=3D2>[=20INFO] =20Error=20type:=20API=20failed=20= unexpectedly</FONT>=20 =20=20<BR><FONT=20face=3DArial=20size=3D2>[=20INFO] =20Kn= own=20error:=20No</FONT>=20 =20=20<BR><FONT=20face=3DArial=20size=3D2>[=20INFO] =20Ac= tual=20error=20code:=20 =20=200x80090006=20(Invalid=20Signature.=20)</FONT>=20</P><BR><BR> =20=20<P><FONT=20face=3DArial=20size=3D2>I=20am=20running=20WinXP=20and=20= when=20I=20go=20to=20Internet=20 =20=20Explorer->Help->About=20my=20cipher=20strength=20is=20128,=20s= o=20I=20am=20pretty=20sure=20I=20 =20=20have=20the=20newest=20crypto=20dlls=20installed.</FONT></P><BR><BR> =20=20<P><FONT=20face=3DArial=20size=3D2>Has=20anyone=20been=20able=20to=20= solve=20this=20problem?</FONT>=20 =20=20</P><BR> =20=20<P><FONT=20face=3DArial=20size=3D2>Thanks</FONT>=20<BR><FONT=20face=3D= Arial=20 =20=20size=3D2>Chris</FONT>=20</P> =20=20<P> =20=20<HR> =20=20This=20transmission=20(including=20any=20attachments)=20may=20contai= n=20confidential=20 =20=20information,=20privileged=20material=20(including=20material=20prote= cted=20by=20the=20 =20=20solicitor-client=20or=20other=20applicable=20privileges),=20or=20con= stitute=20non-public=20 =20=20information.=20Any=20use=20of=20this=20information=20by=20anyone=20o= ther=20than=20the=20intended=20 =20=20recipient=20is=20prohibited.=20If=20you=20have=20received=20this=20t= ransmission=20in=20error,=20 =20=20please=20immediately=20reply=20to=20the=20sender=20and=20delete=20th= is=20information=20from=20your=20 =20=20system.=20Use,=20dissemination,=20distribution,=20or=20reproduction=20= of=20this=20transmission=20 =20=20by=20unintended=20recipients=20is=20not=20authorized=20and=20may=20b= e=20unlawful.=20 </BLOCKQUOTE> <BR> The=20information=20contained=20in=20this=20electronic=20mail=20transmissi= on=20may=20be=20privileged=20and=20confidential,=20and=20therefore,=20prot= ected=20from=20disclosure.=20If=20you=20have=20received=20this=20communica= tion=20in=20error,=20please=20notify=20us=20immediately=20by=20replying=20= to=20this=20message=20and=20deleting=20it=20from=20your=20computer=20witho= ut=20copying=20or=20disclosing=20it.<BR> </BODY></HTML> ------_=_NextPart_001_01C5D013.B91E55FA-- --===============1887576516== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ CryptoAPI mailing list [email protected] http://cypherpunks.to/mailman/listinfo/cryptoapi --===============1887576516==--